Skip to main content

Payment Information Privacy

Answered

Comments

5 comments

  • Ruth

    Hi Andrew, we're currently considering a way to change permissions so Contacts cannot see the credit card information entered by another Contact. Currently, the best way to avoid this is by removing the ability for all Contacts to pay online. 

    When adding a Contact to a client's profile, you can customize their Client Portal settings by clicking Edit beneath the client's name > clicking the Contacts tab > next to the contact, clicking Manage > Manage Client Portal & Billing. If the Contact has access to Pay a balance with credit card using Stripe, they will be able to pay invoices on the Client Portal using any saved credit card information on that client's profile. To remove the Contact's ability to see the credit card information, you can deselect the Pay a balance with credit card using Stripe option > click Save. You can still charge the client on your end using the card(s) stored in their client file.

     
    Comment actions Permalink
  • Cynthia Sortisio

    I agree this is quite a problem, for contacts/parents to be able to see and potentially use credit cards that are not their own. I hope a fix is forthcoming quickly.

    Comment actions Permalink
  • Ruth

    Hi Cynthia, I've alerted our Product Team about this and we're looking into this as a potential enhancement. For the time being, I'd recommend removing the ability for Contacts, who may misuse this functionality, to make payments through the Client Portal. Thank you for your feedback! 

    Comment actions Permalink
  • Jill Pettegrew

    I have searched the Help Center and can't find information on what each parent actually sees and has access to in the Portal. I have a minor client with divorced parents (highly conflictual, lawsuits, etc.) and I'd like to assure each parent that documents they upload, messages, credit card information is not accessible to the other parent. But I'm not seeing this anywhere. In fact, what is written above sounds like Parent B could access Parent A's credit card information (the last 4 digits?). Parent A has full legal/medical custody. Could you please advise?

    Comment actions Permalink
  • Ruth

    Hi Jill, to clarify, Contacts cannot see any messages, or documents you send to other Contacts, or the client. However, everyone who has access to the same client's billing documents and can make payments using Stripe can see the last 4 digits of all credit cards saved under the client's file. If you don't want a Contact to be able to see the last four digits of other credit cards entered, you'll have to disable their ability to make payments through the Client Portal. To do this, go to the client's file > Edit > Manage Client Portal & Billing and uncheck the box to Make Payments using Stripe. You can still process payments using any card already entered in the client's file from your end. You can also send them a Credit Card Information Form so they can enter a new card for you to charge on the client's behalf. 

    Comment actions Permalink

Please sign in to leave a comment.