Not a single card or bank account number is stored.  Any time you enter payment information (such as a credit card, a debit card, an ACH account, etc.), it’s sent over an encrypted connection from your web browser directly to Stripe – one of the largest, most advanced payment processors in the world. They handle payment processing for services like Kickstarter, Lyft, Shopify, Pinterest, Twitter, Heroku, SureveyMonkey, and many other companies. Once Stripe receives valid payment information, they then issue us an encrypted “token.” We use these tokens to create charges against those credit cards and bank accounts – even though we can’t access the full details of those payment methods. We can only fetch the basic information such as the last 4 digits, they type of payment method, its expiration date, and the customer’s name. The full account number or CVC number isn’t released to us. Stripe itself is a certified “PCI Service Provider Level 1” payment processor. This is the most stringent level of certification available.