How we handle money and data
Short version: your money goes from the giver's card to your bank through Stripe, and Potluck never holds it. Your records are yours, and the people you let in see only what their role needs.
Money
Each organization has its own Stripe account connected to its own bank. Gifts are charged on that account and deposited to that bank on Stripe's schedule, usually within two business days. The first deposit takes about a week while Stripe verifies the account.
Potluck never holds funds, never moves money between organizations, and cannot withdraw from your account. Our platform fee is collected by Stripe from each gift and shown on the gift's record.
Refunds are issued from your records by Finance or Admin and come out of your next deposit. Disputes are handled with Stripe, and we show you what they need.
Cards
Card numbers and wallet details go straight to Stripe from the giver's device. They never reach Potluck's servers and are never stored by us. Stripe is certified to the highest level of the card industry's security standard.
Saved cards for returning givers are held by Stripe and tied to that giver's email.
Signing in
There are no passwords. Your team signs in with a link or a six-digit code sent to their email. Links expire, and every sign-in is tied to one email address.
People who give never need an account. Their receipts and giving history open from a link in their email that expires after 30 days.
Who sees what
Admin manages settings, users and billing. Finance sees gifts, people, cash and check entry, statements and exports. Leadership sees totals by fund and month, never a name, an individual gift or a list of people. These limits are enforced in the database, not only on the screen.
Every record belongs to one organization, and the database refuses to return another organization's rows regardless of who is asking.
Your data
Your records are hosted on Supabase, a managed Postgres database, with encryption in transit and at rest.
Export everything to CSV anytime. If you leave, ask and we delete your organization's data within 30 days, after one last export. People who give can ask us for their own data or ask us to delete it.
What we never do
We never sell, rent or share your data or your givers' data. We never run ads. We never email the people who give to you except to deliver the receipt, statement or portal link they expect.
Questions or a problem
Write to hello@potluckpayments.com with Security in the subject line. We answer within one business day.
Questions we didn't answer?
Write to us. A person replies within one business day.