At present, Ridesum uses the third-party provider Stripe to handle payments. Ridesum does not save card information, but when you register your information, it is sent encrypted directly to Stripe. Ridesum does not have access to the data. Stripe returns a key that Ridesum uses to make payments in our system - the key cannot be used for anything else and contains no sensitive information.
All parties involved in the handling, transfer or storage of credit card information must meet a certain industry standard for security - PCI DSS. Stripe has been reviewed by a PCI-certified auditor and is certified to PCI Service Provider Level 1, the highest possible certificate.