4 ms·
Are you even allowed to store CC details of your customers on your servers? I know that you are not forced to be PCI compliant by law, but if you are not and y
by DominikR 13y ago
Are you even allowed to store CC details of your customers on your servers?
I know that you are not forced to be PCI compliant by law, but if you are not and your database is leaked, you will be liable for any damages that result from that leak.
Anyways, I wouldn't ask for CC at signup because your business may come across as untrustworthy or a scam when asking for such data when the user is not buying anything at the moment.
Edit: Sorry my fault, somehow ignored the part of his message stating that he is using Stripe.
- cowls 13y agoA bit like Netflix? Also he didn't actually say he would be storing the details, in fact he said he was using Stripe to manage the payment side of things.
- nmcfarl 13y agoThere are PCI compliant ways of storing this data, and even better there are companies you can pay to do it for you (so you don't screw it up) while providing a lot of other goodies at the same time. See: Braintree, and Stripe.
- zorlem 13y agoThe poster says in the first sentence of his post that it is Stripe [0] (his payment processor), not him, that stores the CC info. [0] https://stripe.com/ https://stripe.com/
- deleted 13y ago[deleted]