I am building a WooCommerce store and I am using the Stripe Payment Gateway for receiving customer payments.
If a visitor creates a customer account on my site, and chooses to save his credit card number there, where is that number actually stored? On my site?
Thanks!
The page I need help with: [log in to see the link]
We appreciate your interest in using the WooCommerce platform for your online store and your choice to integrate the Stripe Payment Gateway for processing customer payments.
Regarding your question about the storage of credit card numbers when a visitor creates a customer account on your site, I’d like to clarify that WooCommerce and Stripe follow strict security standards to ensure the safety and privacy of your customers’ financial information.
By design, your customer’s credit card number and security code are never stored on your website. The payment gateway gives this sensitive information directly to the payment processor. We design our payment gateway plugins to ensure credit card data never enters or passes through your website’s database. This means you need not meet the burdensome and expensive security standards required for storing customers’ credit card numbers.
With some integrated payment gateway plugins you can give your customers the option to “store” credit cards or eChecks on your site via a secure method called tokenization. Tokenized payment methods can be used for recurring payments, pre-orders or for convenience in future purchases by the logged-in customer. eCheck tokens store the last four digits of the eCheck numbers, while credit card tokens include the last four digits of a card, the card brand/type, and its expiration date, mostly so the customer can identify which token is for which card.
I’d like to add one more piece of information. WooCommerce database saves a token, it is a mechanism for WooCommerce to tell Stripe what data to manage. For example, in this testing site, I have 2 payment tokens:
Using that token, WooCommerce will know which is the customer that is making the payment, and how to reference its data. The other database table you can check is the wp_woocommerce_payment_tokenmeta it stores metadata of payment tokens.
The sensitive information is not saved in WooCommerce database tables.
I hope this helps.
Viewing 4 replies - 1 through 4 (of 4 total)
The topic ‘Safe to save credit card details in customer account?’ is closed to new replies.
