Your club's data, protected
Your members trust you with their details. Here is, in practical terms, how Cénacle protects them.
Data storage
A PostgreSQL database hosted by Supabase
Data is stored in a PostgreSQL database managed by Supabase.
Separation by club
Security rules enforced at the database level (Row Level Security) restrict every read and write to the data of the club concerned, and according to the role of the signed-in person.
Access control
Roles and page-by-page permissions
Each team member has a role, and their access is set page by page. These rules are checked on the server: opening an address directly bypasses nothing.
Protection against forged requests
Every change goes through CSRF protection: a third-party site cannot act on your behalf by using your session.
Single-use invitation and reset links
The links sent to activate an account or change a password carry a single-use token. Without that token, the password cannot be changed.
Rate limiting
Sensitive entry points limit the number of requests per address, to slow down repeated attempts.
Payments
Cards stay with Stripe
Payments are processed by Stripe. Cénacle neither sees nor stores card numbers.
Money goes to the club's account
With Stripe Connect, the amounts collected go directly into the club's Stripe account.
GDPR
A person's file
Starting from an email address, a screen gathers what the club holds about a person, and flags any source that could not be read instead of leaving it out.
Individual unsubscribe
Every non-transactional email carries an unsubscribe link specific to its recipient. Unsubscribing affects that person only.
Bounces and complaints removed
An address that bounces or reports an email as spam is removed from non-transactional sends.
Exports
The club's data can be exported as CSV, XLSX or PDF. Exported fields are protected against formula injection in spreadsheets.
Monitoring
Uptime monitoring
The site and the database are checked automatically at regular intervals.
Alerts on scheduled tasks
The tasks that run every night (reminders, payment reconciliation, syncs) alert the Cénacle team if they fail.
Logging without sensitive data
Error logs contain no access keys, and no technical detail is sent back to the user: they receive a reference, while the detail stays on the server.
Your circle deserves better than a spreadsheet
Applications, dinners, payments and memberships in one place. Start with a free trial, or see the platform on your own club with the team.