I am developing a rails site that will allow a group of merchants (5 - 10) to accept orders for credit cards online. I plan to use Activemerchant Stone to handle processing.
In this case, each merchant will have their own trading accounts for processing payments. Storing banking information like this is not something that I am a fan of. This can be allowed by queing and allows the seller to register on the site, enter their credentials and process the order.
However, if I go along this route, it seems to me that I will need to temporarily store information about customer credit cards until the merchant has the opportunity to log into the system and process the order, which is a big evil for me.
Has anyone dealt with this situation? If so, what options are available and what pitfalls should I look for? In my opinion, security client’s credit card information is number one priority, and trading account information is in second place.
source
share