Safe to save credit card details in customer account?

Hi @hans410947

Thanks for reaching out!

We appreciate your interest in using the WooCommerce platform for your online store and your choice to integrate the Stripe Payment Gateway for processing customer payments.

Regarding your question about the storage of credit card numbers when a visitor creates a customer account on your site, I’d like to clarify that WooCommerce and Stripe follow strict security standards to ensure the safety and privacy of your customers’ financial information.

By design, your customer’s credit card number and security code are never stored on your website. The payment gateway gives this sensitive information directly to the payment processor. We design our payment gateway plugins to ensure credit card data never enters or passes through your website’s database. This means you need not meet the burdensome and expensive security standards required for storing customers’ credit card numbers.

With some integrated payment gateway plugins you can give your customers the option to “store” credit cards or eChecks?on your site via a secure method called tokenization. Tokenized payment methods can be used for?recurring payments, pre-orders or for convenience in future purchases by the logged-in customer. eCheck tokens store the last four digits of the eCheck numbers, while credit card tokens include the last four digits of a card, the card brand/type, and its expiration date, mostly so the customer can identify which token is for which card.

You can learn more about that here: WooCommerce site and data security FAQ

Hope this helps!

Great, thank you very much (@xue28)

Hi @hans410947 ,

Glad @xue28 was able to provide the clarity you needed ??

I will go ahead and mark this as resolved then – feel free to create a new topic if you need any further help.

Also, if you have a few minutes, we’d love it if you could leave us a review:?

https://www.ads-software.com/support/plugin/woocommerce-gateway-stripe/reviews/

Cheers!

Hi,

No problem at all.

I’d like to add one more piece of information. WooCommerce database saves a token, it is a mechanism for WooCommerce to tell Stripe what data to manage. For example, in this testing site, I have 2 payment tokens:

Using that token, WooCommerce will know which is the customer that is making the payment, and how to reference its data. The other database table you can check is the wp_woocommerce_payment_tokenmeta it stores metadata of payment tokens.

The sensitive information is not saved in WooCommerce database tables.

I hope this helps.