The C# program I have created uses a webdriver to send the user's card number and other info such as their address to a store page, I never save the number in code other than when it is stored in memory. The user has to enter all of their data every time the program opens; is this a secure approach? (I'd assume not) What can be done to improve this? I don't think I would need keys because the webdriver imitates a keyboard and never communicates with a server. Also the program opens Firefox and uses it to access the website.
Also I don't know if this is the correct forum to ask this but what wording would I use in a privacy statement on my website selling this program? "We value the customer's security here at x, so we never get access to your personal info other than email address (for verification)." Is along the lines of what I was thinking.