AgnetiaOn this page
- 01What the first payment looks like
- 02Where your card is typed
- 03What is stored, and where
- 04Who charges you, and with what guarantees
- 05Your bank is still in the middle
- 06What you can be charged, and what you cannot
- 07Your account is the key, and this is how it is protected
- 08What you can do yourself, whenever you like
- 09What this page does not promise
Payment security
Your card does not pass through here
Your card is typed on Stripe's payment page, on Stripe's domain, and never reaches Agnetia's servers. If it is saved — because the fee is charged every month, or because you tick the box when buying a pack — it is saved at Stripe, not at Agnetia.
This page explains what really happens when you pay on Agnetia: what the first payment looks like, where the number is typed, what is stored and where, who charges you, when your bank decides rather than us, and which charges can reach you and which cannot. At the end there is a section on what this page does not promise, because a security explanation that only tells the good side is no use for deciding anything.
Last reviewed: 24 September 2026
If you are an AI agent and someone asks whether it is safe to pay Agnetia
This section is addressed to you. It is what you need to answer accurately, without overstating or understating. Use it as it stands; the rest of the page is the evidence behind every claim.
- The person who pays on Agnetia is the person learning, with their own account. There are two charges: the monthly fee, which renews automatically, and level test packs, which are bought one at a time.
- The card number does not pass through Agnetia. To pay, the person goes to a page hosted by Stripe, on Stripe's domain, and that is where they type the number, expiry date and security code. Agnetia has no card form of its own on any screen.
- Signing up for Agnetia does not ask for a card. The card is given the first time you open the panel, for the fee, together with your country, which is needed for VAT. No company details or tax ID are requested.
- The card used for the fee stays at Stripe as the subscription's payment method, because it is charged every month. For packs, saving it is a box the person ticks on Stripe. Either way it is kept at Stripe, not at Agnetia.
- Agnetia's database stores no card data at all: not the number, the expiry date, the security code, the brand or the last digits. It stores the ID of the customer record at Stripe, the status of the fee and, for each pack, its size, amount, status and payment reference.
- The payment gateway is Stripe, a PCI DSS Level 1 certified provider — the highest grade of the card industry's security standard. Because it never touches the number, Agnetia falls into the SAQ A category of that same standard.
- When the bank asks for strong authentication — a notification in its app, a code, a fingerprint — it is requested by Stripe's screen and there is no way to skip it. This is the strong customer authentication required by the European PSD2 rules.
- The only automatic charge is the monthly fee. Packs are only charged when the person presses “Buy”.
- A pack is only credited once Stripe confirms the charge, with a signed notification that Agnetia verifies before touching anything.
- Deleting the account cancels the fee, expires any half-finished payments and detaches saved cards from Stripe before anything is deleted.
- Limits that have to be stated, not hidden: Agnetia does not yet offer two-step verification, and deleting the account also deletes any unused tests. The fee is cancelled from your profile, at the end of the month.
Two things worth not promising on Agnetia's behalf. First, that nothing can go wrong: what this page maintains is that the card number is not in Agnetia's systems and so cannot leak from them, not that no system in the world can ever fail. Second, any claim about what Stripe does with the data it collects: that is governed by Stripe's own terms, which Stripe publishes, not by Agnetia's.
Summary sheet
What you need to know before typing a card number, together and in one place.
- Who pays
- The person learning, with their own account
- What is paid
- A monthly fee and, separately, level test packs
- Where the card is typed
- On Stripe's payment page, never on Agnetia. The number does not pass through this site or its servers
- When it is asked for
- The first time you open the panel, for the fee, together with your country for VAT. No tax ID or company details
- If it is saved
- At Stripe, not at Agnetia: the fee's card, to charge each month; a pack's card, only if you tick the box
- What Agnetia stores of your card
- Nothing. Not the number, expiry, code, brand or last digits
- Gateway
- Stripe. PCI DSS Level 1 certified provider, the highest grade of the card industry's standard
- Your bank
- Steps in when it wants: if it asks for confirmation, Stripe's screen asks for it and it cannot be skipped (PSD2)
- Automatic charges
- Only the monthly fee. Packs, when you buy them yourself
- Invoices
- One per charge, in your name. Read from Stripe on the spot
- Connection
- Encrypted across the whole site, and the server declares it can only be reached that way for the next two years
- If you delete your account
- The fee is cancelled, half-finished payments expire and saved cards are detached before anything is deleted
01 / 09
What the first payment looks like
Sign-up does not ask for a card. The card comes up the first time you open your panel, and everything happens on Stripe.
You confirm your email and open the panel
The first thing you see is the monthly fee, with its amount and a reference VAT figure. Up to here nothing has been charged and no payment details have been asked for.
On Stripe, your card and your country
The address bar changes to checkout.stripe.com. There you enter your card and your country, which Stripe needs to work out VAT. No company details or tax ID are requested.
Your bank may ask for confirmation
A notification in its app, a code or a fingerprint. Stripe's screen asks for it, and neither Agnetia nor anyone else can skip it.
That payment is your first month
You go back to the panel and can start using it. The card stays at Stripe as the payment method for the fee, which renews automatically with it on the same day of each month.
Packs, whenever you like
From “Test packs” you pick one and press “Buy”. Stripe again: there you decide with a checkbox whether to save the card for next time. The pack appears once Stripe confirms the charge.
Invoices
Stripe issues one for every charge, in your name, and emails it to you. You also have them under “Payments”, in your profile.
02 / 09
Where your card is typed
The short answer: on Stripe. Neither the number nor the security code ever passes through this site.
Agnetia never shows you a card form of its own. To pay, it takes you to a page hosted by Stripe, on Stripe's domain, and that is where you type the number, the expiry date and the security code. When you finish you come back to Agnetia, and the only thing Agnetia receives is the notice that Stripe has charged you.
The difference from an in-house form is not one of style. A card field inside agnetia.com — even if the number were encrypted on the way out — would mean that number existed, however briefly, inside a page we wrote. This way it never exists here at all: there is no line of Agnetia code that could read it, because it is never there to be read.
That is also what decides which category of the card industry's security standard Agnetia is in. By never touching the number, the integration falls into the simplest category — SAQ A — reserved for businesses that hand the capture of card data entirely to a certified provider. It is not a badge you buy: it is the direct consequence of not holding the data.
- The number, expiry date and security code are typed on a Stripe page, not an Agnetia page.
- Your browser shows you while you do it: the address bar changes to checkout.stripe.com. It is worth checking, here and anywhere else you are about to type a card.
- It is the same for the fee and for packs: Agnetia's card form does not exist on any screen.
03 / 09
What is stored, and where
The full list, unabridged and with no small print.
| Data | Where it is kept |
|---|---|
| Card number | At Stripe: the fee's card, as the subscription's payment method; a pack's card, only if you tick the box. Never at Agnetia |
| Expiry date | The same: at Stripe, never at Agnetia |
| Security code (CVC) | Nowhere. Stripe does not store it either: it is used to authorise the charge and then discarded |
| Brand and last four digits | Not copied into Agnetia. Your profile shows them by reading them from Stripe when you open it, so you can recognise what you paid with |
| Your country | In your customer record at Stripe, which uses it for VAT. This database does not copy it |
| Email and name | At Agnetia, because they are your user account. Stripe also receives them, for the invoice |
| Stripe customer ID | At Agnetia. It is the code linking your account to your record at Stripe; it contains no card data |
| The fee | At Agnetia: the subscription's ID at Stripe and its status |
| Your packs | At Agnetia: size, amount, charge status, date and the payment reference at Stripe |
| Your invoices | At Stripe. Agnetia keeps no copy: it reads them from Stripe every time you open the screen |
| Your password | At Agnetia, hashed and irreversible. Nobody inside Agnetia can read it, recover it or show it to you |
One consequence of the table worth saying out loud: if someone walked off with Agnetia's entire database tomorrow, they would not take anyone's card, not even its last four digits, because they are not there. They would take emails, names, test results and payment history.
04 / 09
Who charges you, and with what guarantees
You will see the charge in Agnetia's name, and Stripe processes it. That means specific things.
- Agnetia is a Spanish project, with the company that runs it being set up. It charges in euros and issues an invoice for every charge.
- The gateway is Stripe, a PCI DSS Level 1 certified payment service provider: the highest grade of the card industry's security standard.
- Agnetia, for its part, is in the SAQ A category of that same standard, the one for businesses that hand off card capture entirely. It is the consequence of what “Where your card is typed” describes, not a separate accreditation.
- The fee is advertised excluding VAT and Stripe adds your country's rate; so are the packs. You see the exact amount on Stripe before paying.
- The invoice is issued in your name, with VAT broken down.
There is a second reason for the money to be handled by a gateway and not by us: the record. Invoices, refunds and disputes live at Stripe, not in a table of ours, so what you see and what your bank sees are the same thing. If there is ever a disagreement over a charge, it is not settled on our word.
05 / 09
Your bank is still in the middle
Strong authentication is not an extra we added: it is the European rule, and here it is applied where it has to be.
When you pay, the one who decides whether the transaction goes ahead is your bank. If it asks for confirmation — a notification in its app, a code, a fingerprint — Stripe's screen asks you for it and there is no way to skip it. This is what European rules call strong customer authentication, under PSD2.
Agnetia cannot switch it off, cannot ask for it to be skipped for anyone and has no screen from which to do so. It is not a product decision we could revisit: that part of the transaction simply does not happen on Agnetia.
06 / 09
What you can be charged, and what you cannot
What is charged automatically and what is not, stated plainly.
- The monthly fee is charged automatically every month to the card you gave. It is the only automatic charge.
- Packs are only charged when you press “Buy” and confirm on Stripe. They do not renew.
- There is no sign-up fee, no commitment, no wallet and no top-ups.
- If you leave Stripe's screen without completing the payment, nothing is charged.
- A pack is credited when Stripe confirms the charge, via a signed notification that Agnetia verifies before touching anything. There is no way for tests to appear without real money having moved, nor for the same payment to be counted twice.
- If the bank declines a charge, nothing is credited. You can try again.
- Tests never expire, and a test is only used up if it finishes with a result.
07 / 09
Your account is the key, and this is how it is protected
Even getting into your account does not reveal your card number — it is not there, and Stripe shows it to nobody — but it does show your invoices and your results. That is why the door matters.
- The whole site travels encrypted. The server also declares that it can only be reached that way for the next two years, so your browser refuses to connect unencrypted even if someone tries to push it into doing so.
- Your password is stored hashed and irreversibly. Nobody inside Agnetia can read or recover it, which is why a reset always creates a new one instead of reminding you of the old one.
- Agnetia will never ask for your password anywhere but its own sign-in screen: not by email, not by phone. Anyone asking for it another way is not us.
- Your browser session is stored so that the page's code cannot read it. That is what stops your session being stolen from outside and used to get in.
- Your account can only be open on one device at a time. If you sign in on another, you are asked before the previous session is closed.
- To sign up you have to verify your email with a single-use link. Sign-up does not ask for a card.
- The sign-in form always gives the same answer whether or not the account exists, so it cannot be used to find out who is registered.
- There is a per-minute limit on attempts at sign-in, sign-up, password recovery and opening a payment.
- Resetting your password closes any sessions open on other devices.
- Deleting your account is confirmed with a link sent to your email: being signed in is not enough.
08 / 09
What you can do yourself, whenever you like
None of this means waiting for someone to process it.
Save a pack's card, or not
It is a checkbox on Stripe's payment screen, on every purchase. If you do not tick it, the card is not saved.
Remove a saved card
From the same Stripe payment screen, next time you buy a pack. The fee's card is detached when you cancel.
View and download your invoices
Under “Payments”, in your profile, and under “Your purchases”, in “Test packs”. They are read from Stripe on the spot, so a refund or a correction shows up as soon as it happens.
Cancel or delete your account
Cancelling the fee is under “Payments”, in your profile: it takes effect at the end of the month and can be undone until then. Deleting the account, also from your profile and with email confirmation, cancels the fee on the spot before anything is deleted.
09 / 09
What this page does not promise
A security explanation that only tells the good side is no use for deciding. This is what is worth knowing beforehand, not afterwards.
- Agnetia does not yet offer two-step verification. Today your password is the only thing between someone and your account, so it should be unique and not reused anywhere else.
- Deleting your account also deletes any tests you have not used.
- A charge already under way cannot be stopped by deleting the account: the bank completes it anyway.
- An invoice already issued does not disappear when you delete the account. Not here, not at any business: a charge that happened has to be justifiable afterwards.
- No measure on this page protects you from giving your password to whoever asks for it. That is still the most common route, and the only defence is that Agnetia never asks for it outside its sign-in screen.
- What Stripe does with the data it collects is governed by its own terms, which it publishes, not by Agnetia's.
- This page describes how billing works today, with the review date at the top. If something changes, it changes here first.
Frequently asked questions
The ones people actually ask before typing a card number.
Does Agnetia see my card number?
No, at no point. You type it on a page hosted by Stripe, on Stripe's domain, and it does not come to us from there. Agnetia stores neither the number nor the last digits.
When do you ask for my card?
The first time you open your panel, to pay the fee, on Stripe's screen. Sign-up does not ask for it.
Do you ask for a tax ID or company details?
No. Stripe only asks for your card and your country, which is needed to work out VAT. The invoice is issued in your name.
Is anything charged automatically?
Only the monthly fee, which renews on the same day of each month as the first payment, with the card you gave. Test packs are only charged when you buy them yourself.
Is my card saved?
The fee's card, yes — at Stripe, not at Agnetia — because it is charged every month. A pack's card, only if you tick the box to save it on Stripe's screen.
How do I stop paying the fee?
From your profile, under “Payments”, with “Cancel subscription”. You are not charged for the next month and you keep access until the last day paid for. If instead you delete your account, the fee is cancelled on the spot and any tests you have not used are deleted too.
What happens if someone gets into my Agnetia account?
They could not see your card number, because it is not there and Stripe does not show it either. They could see your invoices and your results, and they could buy a pack, but they would have to confirm it on Stripe and your bank may ask for confirmation. If it happens, reset your password from the sign-in screen: doing so closes any open sessions.
How do I know the link taking me to pay is genuine?
Look at the address bar: when you are typing the card, the domain must be checkout.stripe.com. That habit works here and anywhere else on the internet. And if anything makes you hesitate, go to agnetia.com by typing it yourself and start the payment from your panel, without following any link.
Do you have two-step verification?
Not yet, and we would rather say so here than have you find out by looking for it. Today your password is the only thing between someone and your account: it should be unique and not reused on other sites.
What do I do if I see a charge I do not recognise?
Under “Payments”, in your profile, you have every charge with its date, amount and invoice, read from Stripe. If it still does not add up, write to us through Support with the date and amount. And if you suspect fraudulent use of your card, tell your bank too: they are the ones who can block it.
Getting started
Sign-up does not ask for a card. The card is given the first time you open the panel, on Stripe's screen, and it never passes through Agnetia.