What we keep, and who sees it.
Last updated 21 October 2026.
Shluchim Portal is run by Chabad Hub. Each Chabad House that uses it keeps its own community records here. Those records belong to that Chabad House; we keep the system running and don't look inside.
What we collect
- When you sign in with Google, Google tells us your name and email address and that the address is verified. We keep those on your team seat so your team knows who's who. We never see your Google password, and we ask Google for nothing else: not your mail, not your calendar, not your contacts.
- When you create an account for a Chabad House: its name, city and time zone, your name and the Google email you signed up with, and the tier and look you picked. We look at it before the Chabad House is made. Once we approve it, it's kept as the record of how your Chabad House began; if we decline it, it's deleted 7 days later.
- A Chabad House's records: the people, families, dates, events, notes, gifts and orders its team enters or imports. Family records can include children's names and dates, entered by the Chabad House and seen only by its team.
- What visitors send through a Chabad House's website, such as a sign-up or an order, goes to that Chabad House.
- Cookies: only the ones that keep you signed in and remember which Chabad House you're looking at. No advertising or tracking cookies.
Who can see it
- Your team, within the areas your Chabad House gives each person.
- Not us, unless we're on your team. The Shluchim Portal team members who set a Chabad House up are on its team as admins during the setup; you see us under Settings → Team like anyone else and can remove any of us at any time. Otherwise nobody at Shluchim Portal can open a Chabad House's records unless it invites one of us for support. Our own setup page sees only each Chabad House's name, city and team emails, and the sign-ups waiting for us.
- The services that run the app, each under its own terms and only to run it for us: Vercel (hosting), Neon (the database, kept in Sydney, Australia), Google (sign-in only), Vercel Blob (photos) and Resend (email) once it's switched on.
- Nobody else. We don't sell or share data, and we don't use it for advertising.
Keeping it safe
Every Chabad House's data is walled off from every other one inside the database itself, so the app can only ever reach the one you're signed in to. Connections are encrypted, sign-in cookies can't be read by scripts, and the accounts that run the service use two-step verification.
Your choices
To see, correct or delete what a Chabad House holds about you, ask that Chabad House: its team can do all three from inside the portal. To close a Chabad House's account and have its data deleted, or for anything else, write to chabadhub.org@gmail.com. Deleted data drops out of the database's restore copies within 30 days.
Changes
When something on this page changes, we'll change the page and the date at the top.