What is JotForm?
JotForm is a free online form builder which helps you create online forms without writing a single line of code. No sign-up required.

At JotForm, we want to make sure that you’re getting the online form builder help that you need. Our friendly customer support team is available 24/7.

We believe that if one user has a question, there could be more users who may have the same question. This is why many of our support forum threads are public and available to be searched and viewed. If you’d like help immediately, feel free to search for a similar question, or submit your question or concern.


  • Profile Image

    Collecting Credit Card Information

    Asked by selvecchio85 on February 06, 2015 at 01:53 PM

    In my industry the cc information is needed to purchase goods from the suppliers portal. If I create a form how can I collect this information without charging the card so it doesn't violate the Jotform Terms of use (This  cannot be done through a payment processor)?

    credit card CC info credit card info
  • Profile Image

    Answered by Ben on February 06, 2015 at 04:08 PM

    Unfortunately there is no way to collect credit cards on jotforms since that would, as you have mentioned, break our terms of use.

    You could however set up authorization payment through our tools, but if I understood correctly you are actually a 'middle man', where you take the credit card info and give it to a third party which makes the charge?

    If I am not right, can you please give us a bit more details and a rundown on what would be the steps people visiting and filling out your jotform would go through - or better to say how would the credit card information 'travel'?

  • Profile Image

    Answered by selvecchio85 on February 06, 2015 at 04:39 PM

    You are correct, these are the steps.

    1. A client wants to pay for their vacation, so we send them a link to the CC authorization form.

    2. They would enter their name, address, etc. 

    3. The CC section would then outline the terms and the credit card information would only be retained until the completion of their trip.

    4. Once we get the client information and cc information, we login to the supplier agent portal or GDS system and pay for the booking that has been arranged and placed on hold for the client.

  • Profile Image

    Answered by Ben on February 06, 2015 at 04:57 PM

    OK, when thinking about it, I can not see any way that this would be OK with our terms of use and allow you to achieve what you are after.

    I can only suggest one thing, which would be OK per our terms, while still allow you to collect this data and that would be to send an email autoresponder after they have filled out the email telling them that to confirm the trip, they have (for example) 1 more day to send you the Credit card and security number.

    The idea is to collect this over email, which we allow over our terms of use.

    It will also allow you to quickly find the people and their data if needed and keep the information for the time needed.

    Would that work for your scenario?

    In case you are not sure how to set the autoresponder, you can check out this guide: Creating a Form Autoresponder

  • Profile Image

    Answered by selvecchio85 on February 06, 2015 at 05:05 PM

    So what your suggesting is that because of the terms of use that I cannot collect credit card information over an SSL connection, but that the work around would be to have my clients send that information over an unsecure email?

    Putting my clients at risk like that I'm not going to do.


    Idea - I could collect just the last 4 digits of the credit card though through the form without it violating the terms of use, couldn't I?

  • Profile Image

    Answered by Ben on February 06, 2015 at 05:33 PM

    I believe that this would still be breaking the terms of use since you can construct the entire number and have it correct at least 99% of the time.

    I understand that the email is not secure way of doing it, but in reality anything outside of jotform would be OK - email, phone call, chat or some other alternative.

  • Profile Image

    Answered by selvecchio85 on February 06, 2015 at 05:46 PM

    PCI-DSS allows the first 6 and last 4 digits of a credit card number to be stored or displayed publicly which would mean this is not considered sensitive information. 

    btw, the OneBip payment processing you have in the forms building is reported by WOT as a scam and unethical site

    Here I was touting the praises of Jotform all this time to other small businesses  for legitimate purposes just to find out today I can't use it for business. So essentially I paid for a pro account for nothing because I can't use it for business. That's too bad because I really liked Jotform, but I guess I'll have to find another solution and move away from jotforms.




  • Profile Image

    Answered by Ben on February 06, 2015 at 06:11 PM

    As you mention WOT I wanted to see if there are any issues present as we like to resolve them right away and can not find anything wrong there

    In fact, based on the user comments as well, I would trust this website.

    You can see that people that posted bad review because of the spam in early days followed up on it and mentioned that they did not check what JotForm actually was and that they are OK with it.

    While we did have those mentioned issues because of spammers in 2011, which were quickly resolved.

    btw, the OneBip payment processing you have in the forms building is reported by WOT as a scam and unethical site

    I can not find anything there mentioning OneBip app - in terms of this integration of ours to be bad.

    Similar score is present for oneBip as well:

     

    PCI-DSS allows the first 6 and last 4 digits of a credit card number to be stored or displayed publicly which would mean this is not considered sensitive information.

    Please note that while that might be true, we are company that is used internationally and that our terms of use are built in order to protect people using jotforms as well as to make sure that we abide by all laws that the same people are protected by.

    Based on everything Credit Cards and their security numbers can not be collected on jotforms (outside of the predicted tools for their capture), or the jotform and the account would be suspended.

    Here I was touting the praises of Jotform all this time to other small businesses  for legitimate purposes just to find out today I can't use it for business. So essentially I paid for a pro account for nothing because I can't use it for business. That's too bad because I really liked Jotform, but I guess I'll have to find another solution and move away from jotforms.

    I am sorry to hear that and I can see that you are on our Premium plan, but please note that the terms of use are same for any plan, Free or Professional or anything in between.

    We however like to assist and help people achieve what they are after and since you are not looking to use the tools that are build to capture these details for you, the only alternative would be what I have already suggested:

    1. phone
    2. email
    3. chat
    4. emailed by post
    5. any other alternative that works for you and your clients - outside of jotform.

    It might be easiest to either call your clients or send them the phone number in the autoresponder through which they can confirm their submission and in the same time leave their credit card number.

  • Profile Image

    Answered by selvecchio85 on February 06, 2015 at 08:25 PM

    When I went to onebip.com, I was redirected to corporate.onebip.com

     

    Is this not the same company?

  • Profile Image
    JotForm Support

    Answered by Welvin on February 07, 2015 at 01:33 AM

    I decided to move your problem with OneBip to a new thread. Here's the new link: http://www.jotform.com/answers/511611. Will attend to it shortly.

    Thanks

  • Profile Image

    Answered by Shoná  on February 09, 2015 at 10:39 PM

    I am shocked that this is not allowed. What is the purpose of not allowing business owners to receive credit card numbers securely as a back up for payment if a person choose to pay via check? 
  • Profile Image
    JotForm Support

    Answered by Kiran on February 10, 2015 at 02:00 AM

    @Shona,

    Your question is moved to a separate thread and shall be addressed there.

    http://www.jotform.com/answers/512962

    Thank you!

  • Profile Image

    Answered by GWHMain on April 18, 2016 at 06:40 AM

    selvecchio85 did you ever get this rectified? We are in the same predicament as you and not able to get answers we need :(
  • Profile Image
    JotForm Support

    Answered by Nik_C on April 18, 2016 at 07:52 AM

    @GWHMain

    I moved your question to a new thread. I will be answered here.

    Thank you.