Payment protection

Payment & Cardholder Data Security

Effective date: 21 June 2026

Roothouse Inventory is designed to minimize exposure to cardholder data. Subscription payments are completed through Flutterwave's hosted payment interface.

Cardholder data

Roothouse Inventory does not collect, process, transmit, or store customers' full card numbers, card verification values (CVV), personal identification numbers (PIN), or one-time passwords. These details are entered directly into the payment interface provided by Flutterwave.

PCI DSS responsibilities

Flutterwave is responsible for protecting cardholder data within its payment environment under its applicable Payment Card Industry Data Security Standard (PCI DSS) controls. Roothouse Inventory's payment flow is designed to reduce its PCI DSS scope by ensuring sensitive card information is handled by the payment provider rather than by Roothouse Inventory systems.

This statement describes the design of our payment integration and should not be interpreted as a claim that Roothouse Inventory independently holds a separate PCI DSS certification.

Information we retain

To verify payments, activate subscriptions, issue receipts, investigate disputes, and process support or refund requests, Roothouse Inventory may retain non-sensitive transaction information, including:

• Payment and transaction references.
• The subscription plan, amount, currency, and payment status.
• The payment provider's transaction identifier.
• Payment timestamps and subscription activation records.
• The account and company associated with the transaction.

Payment verification

A checkout response shown in the browser is not treated as final proof of payment. Roothouse Inventory verifies transaction details with Flutterwave and checks the transaction reference, amount, currency, and status before activating a paid subscription. Payment webhooks are also authenticated before they are processed.

Secure connection

Customers should access Roothouse Inventory and the Flutterwave checkout only through secure HTTPS pages. Do not continue with payment if your browser displays a certificate or security warning.

Protect yourself from payment fraud

Roothouse Inventory employees and support representatives will never request your full card number, CVV, PIN, or one-time password by email, telephone, social media, or in-app message. Never share these details with anyone claiming to represent Roothouse Inventory.

Report a payment security concern

If you notice an unfamiliar payment, suspicious request, or possible payment security issue, contact support@roothouseinventory.com promptly. Do not include sensitive card information in your message.