1. Purpose
   To protect customers’ payment information and personal data and ensure transaction security, our company has established the following payment security policy. We are committed to complying with industry best practices and laws and regulations to ensure the security and transparency of the payment process.
2. Payment Processor
   Our company uses Stripe as our payment processor. Stripe is a leading payment solutions provider with robust security measures and compliance standards, including but not limited to PCI DSS (Payment Card Industry Data Security Standard) compliance.
3. Data Encryption
   All payment information is encrypted via TLS (Transport Layer Security) during transmission to prevent data theft. We do not store sensitive payment information (such as credit card numbers, CVVs, etc.) on our servers; all such data is securely processed by Stripe.
4. PCI DSS Compliance
   We will strictly adhere to PCI DSS requirements to ensure all payment processes meet minimum security standards to prevent credit card fraud and data breaches. Regular internal audits and security checks are conducted to ensure compliance with relevant compliance requirements.
5. User Authentication
   To prevent fraud, we employ multi-factor authentication (MFA) and other monitoring measures to verify the legitimacy of transactions. Upon detecting suspicious activity, we will immediately verify the customer’s identity.
6. Access Control
   Access to the system processing payment information is limited to authorized personnel. All employees must receive regular security training to enhance their security awareness and understand the latest cybersecurity threats.
7. Anomaly Transaction Monitoring
   We monitor all transactions in real time to identify abnormal activity. If a suspicious transaction is detected, we will take necessary measures, contact the customer promptly, and stop the transaction processing.
8. Customer Data Protection
   We are committed not to share customer payment information with third parties unless required by law or with the customer’s explicit consent. Customers may request to view or delete their personal data at any time.
9. Regular Security Audits
   We will conduct regular security audits and vulnerability assessments to ensure that the security of the payment system continues to meet industry standards and best practices.
10. Policy Revisions
    This payment security policy will be reviewed and updated regularly based on regulatory changes and business needs. Updated policies will be published on the company website and customers will be notified via email.
11. Customer Support
    If you have any questions or concerns about our payment security policy, please contact our customer support team. We are happy to assist you.