No financial information is either entered or stored on fortepiano.me website. All payments are processed either by PayPal or Stripe payment gateways. You can select the payment gateway at your convenience on the checkout page.
Stripe:
Stripe has been audited by a PCI-certified auditor and is certified to PCI Service Provider Level 1. This is the most stringent level of certification available in the payments industry.
All card numbers are encrypted at rest with AES-256. Decryption keys are stored on separate machines. None of Stripe’s internal servers and daemons can obtain plaintext card numbers but can request that cards are sent to a service provider on a static allowlist. Stripe’s infrastructure for storing, decrypting, and transmitting card numbers runs in a separate hosting environment, and doesn’t share any credentials with Stripe’s primary services (API, website, etc.).
More information about Stripe security: https://stripe.com/docs/security/stripe
PayPal:
PayPal stores your personal data in secure databases. In addition, PayPal automatically encrypts your confidential information when it’s stored and transmitted. Your data can’t be intercepted when it’s sent from your computer to PayPal. Plus, when you use PayPal to make a secure purchase, PayPal doesn’t share your payment details with the seller.
Regarding your most sensitive data (bank account numbers, credit card numbers) – PayPal designed its system so even the employees only see the information necessary to help you. For example, they can only see the last 4 digits of your financial account numbers.
To protect the security of our customers’ data, PayPal doesn’t disclose the location of its databases or details related its our security systems, algorithms, or encryption systems.
More information about PayPal security: https://www.paypal.com/va/smarthelp/article/how-does-paypal-store-my-data-and-keep-my-data-secure-faq4468