This page explains how MisterApps handles payment card data and the security measures we apply.
1. Our commitment
MisterApps does not store, process or transmit full cardholder data on its own servers. Card details are collected directly by our payment processor through secure hosted payment fields.
2. How card data is handled
When you buy an app, your card details are entered into fields hosted by our PCI DSS Level 1 certified processor. The processor tokenizes the card and returns a token to us. We never see, store or log your full card number, CVC or expiry date.
3. Our PCI scope
Because card data never reaches our systems, our PCI DSS scope is limited to the pages that load the hosted payment fields. We complete an annual self-assessment appropriate for this model.
4. Security measures
- TLS encryption on every page and API request.
- Strict access control and logging on production systems.
- Regular dependency updates and security reviews.
- Fraud screening provided by our payment processor.
5. Billing descriptor
All charges appear as "MISTERAPPS.COM". All charges are one-time; we never create subscriptions.
6. Report a concern
If you notice anything suspicious, contact [email protected] or +1 (720) 000-0000.