If
you choose a direct payment gateway to complete your purchase, then Shopify
stores your credit card data. It is encrypted through the Payment Card Industry
Data Security Standard (PCI-DSS). Your purchase transaction data is stored only
as long as is necessary to complete your purchase transaction. After that is
complete, your purchase transaction information is deleted.
All
direct payment gateways adhere to the standards set by PCI-DSS as managed by
the PCI Security Standards Council, which is a joint effort of brands like
Visa, Mastercard, American Express and Discover.
PCI-DSS
requirements help ensure the secure handling of credit card information by our
store and its service providers.
For
more insight, you may also want to read Shopify’s Terms of Service
(https://www.shopify.com/legal/terms) or Privacy Statement
(https://www.shopify.com/legal/privacy).