Can I store customer card numbers to make repeat orders faster?
Updated 6 October 2026
Do not store card numbers yourself. Handling raw card numbers needs the most demanding PCI form (SAQ D). You may keep card type, last four digits and expiry.
- PCI: sending raw card numbers to the API yourself needs SAQ D, which can mean over 300 security controls.
- What you may keep: non-sensitive details Stripe returns, such as card type, last four digits and expiry date.
- India: since 1 October 2022 only card issuers and card networks may store card-on-file data.
- Saved cards: in India they work through tokens, not stored numbers.
Faster repeat orders without handling cards
Menuthere sends customers to your own payment account to pay, so you never handle card numbers. Order history helps repeat customers order again quickly from the same link, at 0% commission.
Next questions
Sources (3)
- PCI compliance guide, Stripe, read 30 September 2026
- Security at Stripe, Stripe, read 30 September 2026
- RBI card-on-file notification, Reserve Bank of India, read 30 September 2026