Security
Clubware carries a club's money and its members' records — including children's details and medical notes. Both deserve a straight answer on how they are protected. This page is that answer, in plain language. The formal versions live in the privacy policy and terms.
Payments
Payments run on Stripe, a certified PCI DSS Level 1 provider — the highest level of payment security certification.
Your club has its own Stripe account underneath Clubware. Money flows through it into your club's bank account, and your billing history lives in it.
Full card and bank account numbers go straight to Stripe. They never touch Clubware's systems — nobody at Clubware can see a card number, because we never have one.
Card capture is verified with 3D Secure, and the join link is protected against bots.
Your club's records
Data is encrypted in transit and at rest.
Each club's data is isolated to that club.
Staff sign in with modern authentication, including passkeys.
You decide what each staff member can reach, and an audit log records who changed what, and when.
Your club owns its member data. We do not sell personal information and we do not use it for advertising.
The privacy policy lists every service provider that helps run the platform and what each one does.
Privacy, and getting your data back
Clubware operates under the New Zealand Privacy Act 2020, and your club controls its member information. We process it to run your billing, and for nothing else.
Ask for a copy of your data and we will export it. Ask us to delete it and we will, except for records we are legally required to keep, such as financial and dispute history.
Your transactions export as CSV at any time from the dashboard, and your data stays exportable for 30 days after you cancel. Nothing disappears the moment you give notice.
If a data breach affects your club, we tell you — within 72 hours of confirming it, and sooner where we can.
Privacy and data requests: contact@clubware.app
How Clubware is built
More than 5,500 automated tests run against every change, and the codebase is fully type-checked in strict mode.
Every release passes through three environments — development, staging, then production — and deploys with zero downtime.
Production is monitored around the clock, with error tracking that raises a fault before a club notices it.
Live and historical uptime is public at status.clubware.app.
When something breaks
The founder is on call, day and night, with no ticket queue in between. Incidents are worked immediately, with a fix targeted within the hour.
Found a security issue? Email contact@clubware.app — reports go straight to the person who can fix them.
The company
Clubware is a New Zealand business, founded in 2025, operating under the New Zealand Privacy Act 2020.
Questions about anything on this page: contact@clubware.app