Payment Security

The payment process handles credit card, bank, or store transaction data, so it should be managed by the secure checkout pages of professional payment service providers. Kanorio's subscription payments and store collections will follow the respective processes based on the payment service provider used. Kanorio does not store complete credit card numbers.

This page explains who handles payment data, what PCI DSS is, and what you should be aware of when making payments or contacting customer support.

Subscription Payments Handled by Stripe

When you upgrade your Kanorio plan, manage your subscription, or update your payment method, you will enter the payment flow provided by Stripe. Stripe handles card number input, payment verification, and transaction processing; Kanorio only receives payment status and billing information necessary to provide the service and does not store your complete card number or CVC.

Stripe publicly states it is a PCI Service Provider Level 1. This is one of the highest levels of PCI certification for service providers in the payment industry. You can view their public information at Stripe Security.

Store Collections Processed by the Provider Shown on the Checkout Screen

If you sell products on the Kanorio website, buyer payment data will be processed by the payment service provider displayed on the checkout screen:

• Stripe Connect: Buyers will complete card payments or other available payment methods through Stripe's payment flow.
• PAYUNi: If your store uses PAYUNi, payment data will be processed through PAYUNi's payment flow. PAYUNi states in its Public Terms of Service that it maintains compliance with PCI DSS (Payment Card Industry Data Security Standard).

Available payment methods, regions, and approval conditions may vary by store. Please refer to your store's settings and the actual checkout screen for details. The certifications and security commitments of payment service providers belong to those providers and do not imply that Kanorio itself holds the same certifications.

Understanding PCI DSS in Simple Terms

PCI DSS is the security standard used by the payment card industry to protect cardholder data and payment authentication data. You can think of it as "common security rules that anyone handling credit card data must follow."

Using regulated payment flows like Stripe or PAYUNi prevents Kanorio or merchants from collecting and storing complete card numbers themselves. However, payment security is not just a technical issue: merchants should still clearly explain product details, refund policies, and contact information to avoid disputes arising from unclear information.

Protect This Data When Paying

• Only enter your complete card number, CVC, and one-time verification code on the official payment page displayed in your browser.
• Verify that the URL and payment service provider name are correct. If in doubt, stop the payment and restart the process from the Kanorio backend.
• Do not provide your complete card number, CVC, online banking password, or one-time verification code via customer support chat, email, private social media messages, or phone.
• When contacting customer support, simply provide the payment date, amount, website name, and invoice or order information to help the team investigate.

Refunds and Payment Disputes

If you are a subscriber, manage your payment methods, invoices, and subscriptions from "Billing" in your backend. If you are a store seller, please read Refund Processing for refund operations. If you encounter a buyer dispute with their bank, please read Consumer Dispute Resolution.

Related Documents

• Subscriptions and Payments
• Payment Methods Overview
• Refund Processing