Clubspot does not store any sensitive payment data on its systems. This article explains how those details are stored when saved by members.
Article Navigation:
Clubspot uses Stripe, a PCI level 1 certified payment processor, to collect and encrypt all sensitive payment data. Stripe is an industry leader in modern and secure payment processing and processes payments for a wide range of merchants globally. 90% of U.S. adults have made purchases through platforms or merchants using Stripe.
Clubspot uses Stripe directly to manage the collection of card or bank details. No card or bank details ever traverse a Club’s system or Clubspot’s servers, and Clubspot has no way to retrieve sensitive payment details like credit card numbers or bank account numbers from Stripe’s secure, encrypted vault. Read more on Stripe’s security here.
When a payment method is saved on file, a token for that method is provided to our system by Stripe. This means that Stripe maintains the payment method details within their secure vault and then provides Clubspot with a reference token which we can store in our system. The token provided for a payment method is random, meaning that it cannot be decrypted back into the card number. Clubspot has no way to retrieve sensitive payment details from Stripe using this token.