Security and your data
How Gather Hub keeps a church's records safe, and why they stay the church's.
Where it is kept
Gather Hub runs on Amazon Web Services, in the US West (Oregon) region. Every church's records are kept apart from every other church's by the system itself, not by policy alone: each request is checked against the church it belongs to before anything is read or written.
Encrypted on the way and at rest
Every page, form and file travels over an encrypted connection. The database and the stored files are encrypted where they are kept.
Backed up, twice over
The database can be restored to any second in the last 35 days. A copy is also taken every night and kept for 30 days in a separate backup vault, which survives even if the database itself is lost. The database is protected against being deleted.
Who can see what
Each person signs in with their own account and sees only what the role their church gave them allows. Two-step sign-in is available to everyone: a passkey, an authenticator app, or a code sent by text message.
Pictures and files
Every uploaded picture and file is checked for malware before anyone can open it, and the links that open a church's private files expire.
Payments
Card and bank details go straight from the giver to Stripe and never reach Gather Hub. Gifts are paid into the church's own Stripe account, not ours.
When something goes wrong
Errors are reported to us automatically, so they are fixed rather than discovered later, and names, email addresses and other personal details are removed from those reports before they leave the browser or the server.
No AI on your records
Gather Hub does not send a church's records to any AI service, and they are never used to train AI models. A feature that ever needs to will say so before a church turns it on.
The records are the church's
A church's owners and admins can download everything -- people, giving records, events, files -- as one archive at any time, even when the workspace is read-only. A free trial that ends without a plan is deleted 90 days after it ends, and a paid subscription that ends is deleted 180 days after it ends, with emails beforehand in both cases.
Reporting a problem
If you think you have found a security problem, write to support@gather-hub.com. Questions about personal information go to privacy@gather-hub.com.
Last updated October 8, 2026