Payments by Stripe

How subscription payments are handled by Stripe

Card data never reaches MoveLane. Here is exactly what Stripe holds, what we hold, and what you can see.

Where card details go

Subscriptions are taken through Stripe Checkout, embedded on our pricing page. The card fields are rendered and submitted by Stripe's own component, so card numbers, expiry dates and security codes are transmitted directly to Stripe and never pass through or get stored on MoveLane servers.

Against your MoveLane account we store only the plan you chose, subscription status, trial end date, current period end date and the Stripe customer and subscription identifiers needed to look your billing up.

How your access is granted

When a payment, trial start, plan change or cancellation happens, Stripe notifies us with a webhook. Every webhook is verified against a signing secret before it is accepted, so a third party cannot fake an upgrade or a cancellation.

Each accepted event is written to an internal subscription event log, which is what our admin billing page reads when checking that your entitlements match Stripe.

Managing your billing

Payment methods, invoices, receipts, plan changes and cancellations are handled in the Stripe billing portal, opened from your subscription page. Because the portal is Stripe's own, changes there are authoritative and flow back to MoveLane automatically.

Evidence you can expect to see

The checkout form on /pricing is served by Stripe — its frames come from stripe.com, and the URL of the portal you are sent to begins with https://billing.stripe.com.
Emailed receipts and PDF invoices issued by Stripe for every charge.
Your /account/subscription page showing plan, status, trial end and next renewal date, with a re-sync action that re-reads Stripe.
The card you used is listed in the Stripe billing portal, not anywhere in your MoveLane profile.

What this does not claim

MoveLane is not a payment institution; we do not hold funds or process cards ourselves.
PCI DSS compliance for card handling is Stripe's, achieved by our not touching card data. It is not a MoveLane certification.

This article is maintained by MoveLane to answer common security, privacy and billing questions. It is not an independent certification, audit or legal advice.