Online Giving Security & Privacy

Donor payment details

Card numbers, security codes, and bank account numbers are entered into Stripe's own secure payment form and sent directly to Stripe. Mutual Covenant never receives or stores them. Mutual Covenant stores the donor's name and email (unless anonymous), the amount, fund, date, status, Stripe reference ids, and the payment method's brand and last four digits as reported by Stripe.

Church banking information

Bank account and identity details are collected and stored by Stripe during setup. Mutual Covenant stores only status information and the last four digits of the payout account.

Separation between churches

Each church has its own Stripe connected account. Every payment, fund, refund, and Stripe event is tied to one church through a server-side mapping. A church can never see, refund, or receive another church's gifts.

Verified events

Stripe notifies Mutual Covenant of payment results through signed webhooks. Every event's signature is verified before anything is recorded, duplicate deliveries are ignored, and the church is resolved from Stripe's connected-account id — never from anything a browser sends.

Receipts and statements

Stripe emails the donor a payment receipt. Contribution statements continue to be generated by your church from Mutual Covenant's Giving records. A donation confirmation is not tax advice; consult your tax advisor about deductibility wording.