Security & data handling

What we touch. What we don't.

We're asking you to install a Chrome extension that operates inside your payment software and to send us your processing statement. Both are serious asks. Here's exactly what happens with your data, in plain English.

The Chrome extension

Read-only, scoped, and silent.

What ShopConnect Pro touches

·The payment screen inside the software you've already logged into (Jobber, Clio, Tekmetric, etc.).
·The invoice ID, amount, and customer name on that screen (so we can stamp the transaction back).
·A secure connection to the processor that runs your charge.

What it doesn't

·Log into your software on your behalf.
·Store your passwords.
·Access your customer list.
·Change your invoices outside the paid-status update.
·See your customers' card numbers. Ever.

Card data

Tokenized in the browser. Routed direct.

When a customer swipes, taps, or types a card, the data goes from the card straight to a Level 1 PCI-certified processor. The extension never sees the PAN. Our servers never see the PAN. Your servers don't either.

Processors we route to (Level 1 PCI-certified)

Stripe · Valor PayTech · Dejavoo · EPX · NMI · Authorize.net · North · Maverick · Windcave

Which processor your account routes through depends on the rate sheet you sign. Every one of them carries Level 1 PCI certification, the highest tier in the standard.

Need our PCI attestation before you board? We send the current Attestation of Compliance on request, usually within one business day.

Request PCI attestation →

Your processing statement

What happens when you send us one.

Uploads sit in a US-based encrypted file store. Encrypted at rest. Access is logged. The bucket isn't public, isn't indexed, isn't shared with anyone outside ShopConnect Pro.

Only your account manager reads it. A real person at our Albany NY office. Their name is in the reply email. You can ask for them by name on the call.

We delete it 30 days after we send the quote. Sooner on request. Email [email protected] and we'll wipe it the same day with confirmation.

Card numbers aren't on a processing statement. We literally cannot see your customers' card data through this channel. The statement shows totals, fees, and interchange categories - nothing more.

A short list of things we refuse to do

Your data isn't a side business.

We don't sell your data. Not to brokers. Not to ad networks. Not to anyone.
We don't share your customer list. Your transactions are yours. Your customers are yours.
We don't add you to a drip campaign. Send a statement. We reply. We wait for you to write back. That's it.
We don't hide the rate. Every line, every month, every statement. The same standard we hold processors to.

Questions a quick email can't cover?

Security questionnaires, vendor reviews, compliance docs - send them over and we'll turn them around in one business day. We'd rather over-answer than under-prove.

Email [email protected] See live integration health

Built by: ShopConnect Pro LLC · 41 State Street, Albany NY · Subsidiary of VPayment Solutions LLC