Payment & Security

Payments

• Stripe Integration: We process all payments via Stripe, a PCI-DSS Level 1 certified payment processor. Your card data is handled directly by Stripe and never stored on our servers.
• Supported Methods: We support major credit and debit cards (Visa, Mastercard, American Express). Additional payment methods like digital wallets may be available where supported.
• Secure Checkout: All payment pages use 256-bit SSL encryption to protect your information during transmission.

Security Measures

• HTTPS/SSL: Our entire site operates over HTTPS with TLS 1.2+ encryption
• Data Protection: Sensitive data is encrypted at rest using industry-standard encryption algorithms
• Access Controls: We implement strict access controls and the principle of least privilege for all team members
• Regular Updates: We conduct regular security audits, dependency reviews, and platform updates
• Secure Infrastructure: Our infrastructure is hosted on enterprise-grade cloud platforms with built-in security features

Fraud Prevention

To protect you and other users from fraudulent activity:

• Automated Screening: All transactions undergo automated fraud detection checks
• Manual Review: Suspicious orders may be flagged for manual review, which may briefly delay delivery
• Account Protection: Unusual activity may result in order cancellation or account review for your protection

Data Privacy

We are committed to protecting your privacy:

• Payment information is processed by Stripe and not stored on our servers
• We collect only the minimum data necessary to provide our services
• Your data is never sold or shared with third parties for marketing purposes
• See our Privacy Policy for full details

PCI Compliance

Our payment processing is PCI-DSS compliant through Stripe. This means:

• Cardholder data is protected with the highest security standards
• Regular security testing and monitoring
• Secure network infrastructure
• Restricted access to cardholder data

Reporting Security Issues

If you discover a security vulnerability or have concerns about our security practices, please contact us immediately at hello@echoresonance.com. We take all security reports seriously and will respond promptly.