PCI Compliance & Payment Security

When you subscribe or make a purchase, you are redirected to a Stripe-hosted checkout page. The card details you enter are sent directly to Stripe over encrypted TLS channels and never pass through our infrastructure. We cannot see, log, or retain your full card number.

For subscription management, card updates, and invoice review, we open the Stripe Customer Portal — also hosted by Stripe — so sensitive card operations remain within Stripe's PCI-compliant environment.

• Stripe Checkout: One-time purchases and subscription sign-ups use Stripe Checkout, a hosted payment page certified as a PCI Level 1 Service Provider.
• Stripe Customer Portal: Subscription upgrades, downgrades, cancellations, payment-method updates, and invoice downloads are handled through the Stripe Customer Portal.
• Stripe Billing & Invoicing: Recurring charges, prorations, and receipts are generated and delivered by Stripe. Stripe emails a receipt or invoice PDF to your business email after each charge.

Because all card entry and storage happens inside Stripe, AutoReels Pro qualifies for the simplest PCI Self-Assessment Questionnaire (SAQ A) scope for merchant service providers that do not handle cardholder data.

We only keep non-sensitive billing records needed to support your account and comply with tax and accounting requirements:

• Charge amount, currency, and date
• Stripe session, payment intent, or invoice IDs
• Receipt URL generated by Stripe
• Plan or add-on type purchased
• Subscription status (active, past_due, canceled, etc.)

We do not store full card numbers, bank account numbers, CVCs, expiry dates, or Stripe tokens that can be used to charge a card.

Stripe is certified as a PCI Level 1 Service Provider, the highest level of certification available in the payments industry. Stripe's infrastructure handles encryption, tokenization, network security, and ongoing compliance monitoring.

You can read more about Stripe's security and compliance program on their official page:

Payment security is a shared responsibility. AutoReels Pro selects Stripe as our payment processor and never requests card details via email, chat, or phone. You are responsible for keeping your AutoReels Pro account password and email access secure, and for reviewing your Stripe receipts and invoices for unauthorized charges.

If you suspect unauthorized billing activity, please contact us immediately and review your subscriptions in the Stripe Customer Portal from your Settings page.