How is payment information handled securely when a parent buys a 10 or 20 hour package over the phone?

For Tutoring Services

When a parent commits to a package on a call, the safest and most common approach is for Voksha to capture the intent to purchase and the package tier the family wants, then route actual card entry to a secure, PCI-DSS compliant payment link or your existing payment processor, such as Stripe or a payment portal built into your tutoring management software like TutorCruncher, rather than having raw card numbers spoken and captured directly through the phone conversation itself. This matters because PCI-DSS, the payment card industry standard that governs how card data must be stored and transmitted, applies whenever a business handles cardholder data, and voice channels that capture and store full card numbers carry real compliance obligations and risk. The practical workflow most tutoring centers use is: parent confirms they want the 20-hour package during the call, Voksha books the assessment or first session and sends a secure payment link by text or email for the parent to complete on their own device, or transfers to a staff member for phone-based card processing through a PCI-compliant terminal if the center prefers to keep payment fully phone-based. Either way, the goal is the same: keep raw card data out of the call transcript and recording entirely. Centers on the Enterprise plan get additional compliance support including HIPAA and GDPR, useful if you also process international student payments or handle any health-adjacent information for students with documented learning accommodations. The core principle is that Voksha handles the scheduling and sales conversation, and payment capture itself flows through a properly secured, purpose-built payment channel.