Is Voksha PCI compliant for collecting deposit or gift certificate payment information over the phone?

For Salons & Spas

Voksha is not designed to have callers read card numbers aloud for it to key in, which is the right approach given PCI DSS rules around handling cardholder data over voice channels. Instead, when a caller wants to pay a deposit to hold a color appointment or wants to buy a gift certificate, the standard flow is for Voksha to send a secure payment link by text or email through your existing payment processor, whether that is Square, the payment module inside Vagaro or Boulevard, or another PCI-compliant gateway you already use for in-salon transactions. The card number itself is entered by the client directly into that processor's secure page, never spoken to or stored by Voksha. This matters for salons because deposit collection has become common for high-value services like bridal packages, extensions, and multi-hour color corrections, where no-shows are expensive, and it means you get the deposit-collection benefit without creating a new PCI liability by having an AI system capture raw card numbers over a phone call. If your current process involves a receptionist writing down a card number on a sticky note to charge later, moving to a payment-link flow is actually a compliance improvement, since it removes that handwritten card data entirely from your workflow. For salons on Enterprise, which includes broader compliance coverage, this same link-based approach applies consistently across payment collection, refunds, and gift certificate sales, so your PCI exposure stays with your existing certified processor rather than expanding to a new system.