Security and data handling

What we touch. What we don't.

We ask you to install a Chrome extension inside your payment software and to send us a statement. Both are serious asks. Here is exactly what happens with your data.

It reads the payment screen.

The extension sits on one screen inside software you are already logged into. It reads only what it needs to send the charge and mark the invoice paid.

What it reads

The payment screen inside your software.
The invoice number, the amount, and the customer name on it.
A secure connection to the processor that runs your charge.

What it never does

Never logs into your software for you.
Never stores your passwords.
Never opens your customer list.
Never changes an invoice beyond marking it paid.
Never sees your customers' card numbers.

Card numbers never reach us.

When a customer taps, swipes, or types a card, it goes straight to a Level 1 PCI-certified processor. It does not stop at the extension, at our servers, or at yours.

What that looks like technically

The card is tokenized in the browser and sent direct. The extension never sees the full card number, and neither do our servers or yours.

What comes back to the payment screen is a token, an auth code, and the last four digits.

Which processors we work with

Stripe, Valor PayTech, Dejavoo, EPX, NMI, Authorize.net, North, Maverick, and Windcave.

Which one your account uses depends on the rate sheet you sign. Every one of them carries Level 1 PCI certification, the highest tier in the standard.

Need our PCI attestation?

We send the current Attestation of Compliance on request, usually in one business day.

Request PCI attestation

What happens to your statement.

You send one file. Here is where it sits, who opens it, and when it is deleted.

It sits in an encrypted file store.

US-based and encrypted at rest. Access is logged. The bucket is not public, not indexed, and not shared outside ShopConnect Pro.

Only your account manager reads it.

A real person at our Albany NY office. Their name is in the reply email, and you can ask for them by name on the call.

We delete it 30 days after the quote.

Sooner on request. Email support@shopconnectpro.com and we wipe it the same day, with confirmation.

Card numbers are not on a statement.

We cannot see your customers' card data through this channel. A statement shows totals, fees, and interchange categories, nothing more.

Your data is not a side business.

We don't sell your data.

Not to brokers. Not to ad networks. Not to anyone.

We don't share your customers.

Your transactions are yours. Your customers are yours.

We don't run drip campaigns.

No drip campaigns. One email, then we wait for you. We don't share your email with processors or partners.

We don't hide the rate.

Every line, every month, every statement. The same standard we hold processors to.

See live integration health

Lower fees by Monday.

Start with the 60-second estimate, or skip ahead and send a statement for your real number. Either way, you keep your software, and you can be live in 48 hours.

See my savings

60 seconds. No email needed to see your number.

Send one statement

Security questionnaires, vendor reviews, and compliance docs go to support@shopconnectpro.com. We answer in one business day.