Security & payment scope

Shopify holds the cards

ToroSachi is a Shopify subscription app. When a shopper saves a payment method, Shopify Payments (or the merchant’s Shopify-supported payment provider) vaults the card. Recurring charges run through Shopify’s subscription billing APIs. ToroSachi never sees, transmits, or stores a primary account number (the full card number, or PAN).

What we do store about a payment method

To show a merchant “Visa ending 4242, expires 09/27” and to skip a retry when Shopify has already marked a method revoked, we keep only the tokenized references Shopify already exposes:

• A Shopify payment-method identifier (not a card number)
• Brand, last four digits, and expiry month/year when Shopify provides them
• Whether Shopify reports the method as revoked or expiring soon

Those fields are optional. If Shopify has not told us yet, we show that the method is unobserved — we do not invent a healthy card.

PCI scope

Because ToroSachi never touches PAN data, we are not a card-data environment. Card data stays in Shopify’s vault. Our operators and merchants manage subscriptions, retries, and analytics; they do not key card numbers into ToroSachi.

Questions

Privacy policy: Privacy Policy. Security questions: privacy@torosachi.com.