Security & Payments

Payments

Subscriptions are paid by card, monthly in advance, in USD. Card details are collected on a secure payment page — encrypted in transit with 256-bit TLS — and processed by a PCI DSS compliant payment provider. Card numbers never touch our servers. Charges appear on your statement as NL OCO. If a charge ever looks wrong, write to customers@operatorco.app and we will resolve it or refund it.

Checkout for businesses on the rails

Businesses approved to run checkout through Operator Co get card fields hosted by PCI DSS Level 1 providers — card numbers never touch the business's site or ours. Each business's customers see that business's own name on their statements, settle to the business's own bank account, and reach that business's support line. Dispute responses are built from the record checkout kept: items, address checks, delivery.

Your data

• In transit. All traffic, including source connections, runs over TLS 1.2 or newer.
• At rest. Stored data and backups are encrypted.
• Read-only by design. Source connections can read your numbers; they cannot write to your bookkeeping, store or CRM.
• Export. Everything shown in the Review exports as CSV, any time, with no notice.

Access

Your data is accessible to the operator who runs the service, on individually named accounts with multi-factor authentication. We do not use shared logins, and access is reviewed quarterly.

If something breaks

We notify affected customers by email within 72 hours of confirming an incident that touches their data, with what happened and what we did about it. Scheduled maintenance is announced in the Review itself.

Support

Security or payment questions go to customers@operatorco.app and are answered within one business day. See the Contact page for phone and hours.