Payment and invoices
Payment is planned to run through Stripe for WordPress and script sites, and through Shopify for Shopify stores. Neither is switched on. The owner has to create the accounts: OPEN.
How it works#
- The account owner starts a payment from the billing page. It opens a checkout page hosted by the payment provider. We never see or store card details.
- The owner can open the provider's customer portal to change the card, change plan or cancel. The provider's portal must have plan switching switched on: OPEN.
- The provider's invoice is the official document. The product keeps a copy of the list: number, status, amounts, period, and links to the invoice and the PDF.
- Owners and admins can read the invoice list. Other roles cannot.
What is built#
The payment code and the billing pages work against the provider's test mode only. Live keys and live events are refused on purpose until the owner decides to go live.
Not decided or not built#
- Tax and VAT handling: OPEN. The provider's invoice is where tax would appear.
- Refunds: OPEN.
- Currencies other than US dollars: OPEN.
- Whether a merchant-of-record service is used: OPEN.
Security#
Redirect addresses after checkout must be on a list of allowed hosts. Payment notifications are checked by signature. Live events are refused while the product is in test mode.
For what happens when a payment fails, see Cancel, lapse and grace.