Your card does not pass through here

The short answer: on Stripe. Neither the number nor the security code ever passes through this site.

• The number, the expiry date and the security code are typed on a Stripe page, not an Agnetia one.
• Your browser shows you this while you do it: the address bar changes to a Stripe domain. It is worth looking at — here and anywhere else you are about to type a card.
• When you come back, Agnetia knows you have a card saved, what brand it is and which four digits it ends in. Nothing else.
• The same holds the first time and every time you change it: Agnetia has no card form on any screen, neither on the web nor in the Android app.
• Besides card, Stripe's page may offer you the payment methods people commonly use in your country. Whichever you pick, you enter it there and not here.

The full list, unsummarised and with no fine print.

The charge appears under Agnetia's name, and Stripe processes it. That means specific things.

• Agnetia is a Spanish project, with the company that runs it being incorporated, and it charges in euros with a numbered invoice for every charge.
• The gateway is Stripe, a payment service provider certified PCI DSS Level 1: the highest tier of the card industry's security standard, and the same one any bank requires of the providers it works with.
• Agnetia itself falls under SAQ A of that same standard, the category for a business that fully delegates card capture. It is the direct consequence of what the previous section describes, not a separate accreditation.
• VAT is calculated by Stripe according to the country you are buying from, and broken out on the invoice. If you are buying as a business, you can enter your VAT number on the same screen.
• Outside the eurozone, Stripe may show and charge you in your local currency. The invoice is still in euros.

Strong authentication is not an extra we added: it is European law, and here it is enforced where it has to be.

A subscription product earns trust mostly through what it does not do.

• Saving a card charges nothing. The 24-hour courtesy period starts at that moment and the first charge lands when it ends.
• The only recurring charge is the monthly fee. There is no sign-up fee, no minimum term, no extras and no different plans to choose between.
• The wallet balance never tops itself up. When it reaches zero the speak button switches off and the rest of the platform keeps working. There is no negative balance and no charge that turns up next month to cover one.
• A top-up is started by you, the amount is chosen by you, and you pay for it on Stripe's page. It has a floor, a per-operation ceiling, and daily and monthly caps per account.
• The balance goes up once Stripe confirms the money arrived, through a signed notification that Agnetia verifies before touching anything. There is no way for a balance to rise without real money having moved, nor for the same payment to be counted twice.
• A failed charge does not cut you off on the spot: it is retried over several days and you keep practising meanwhile. If the retries run out the account is suspended, but the balance is kept in full and is waiting for you if you settle up.
• Agnetia never talks about money during a conversation. The agent does not mention the balance, does not warn you it is running out, and will never ask you for a payment detail. Figures are shown on screen.

Not even getting into your account reveals your card number — Stripe shows it to nobody — but it does reveal your invoices. Which is why the door matters.

• The whole site travels encrypted. The server also declares that it may only be spoken to that way for the next two years, so your browser refuses to connect in the clear even if something tries to push it to.
• Your password is stored hashed, with no way back. Nobody inside Agnetia can read or recover it, which is why a reset always creates a new one rather than reminding you of the old.
• Agnetia will never ask for your password outside its own sign-in screen: not by email, not by phone, not during a conversation with the agent. Anyone asking for it by another route is not us.
• Your browser session is stored in a way the page's own code cannot read, and marked so it does not travel anywhere else. That is what stops a session being stolen from outside and used to get in.
• Signing up requires verifying your email with a single-use link. The card comes afterwards, with the session already open and the email already verified — never inside the sign-up form.
• The sign-in form always answers the same whether the account exists or not, so it cannot be used to find out who is registered.
• There is a per-minute limit on attempts to sign in, sign up, reset a password and redeem a promotion code.
• Deleting your account is confirmed with a link sent to your email: being signed in is not enough.

None of this requires writing to anyone, waiting for a reply, or giving a reason.

1. 01

   Change your card

   From «Your spending», in your profile. Stripe's form opens straight onto the card screen and returns you here when you are done, without walking you past any cancel button.

2. 02

   See and download your invoices

   All of them, numbered and with VAT broken out. They are read live from Stripe, so a refund or a correction shows up as soon as it happens.

3. 03

   Cancel or delete your account

   Cancelling, with no minimum term and no penalty, takes effect at the end of the period you have already paid for. Deleting the account cancels the subscription first and deletes afterwards, so no live charge can be left with no account behind it.

A security explanation that only tells the good part is no help in deciding. This is what is worth knowing beforehand, not after.

• Cancelling voluntarily wipes whatever balance is left, whether it came from the fee or from a top-up. It takes effect at the end of the period already paid for, so you can spend it before it goes. A failed payment, by contrast, wipes nothing: there the account is suspended and the balance waits for you.
• Cancelling and signing up again does not bring back a lost balance, and does not open another 24 hours of courtesy.
• Agnetia does not offer two-step verification yet. Today your password is the only thing between someone and your account, so it is worth making it unique and not reusing it anywhere else.
• Nothing on this page protects you from giving your password to whoever asks for it. That remains the most common route in, and the only defence is that Agnetia never asks for it outside its sign-in screen.
• What Stripe does with the data it collects is governed by Stripe's own terms, which Stripe publishes, and not by Agnetia's.
• An invoice already issued does not disappear when you delete your account. Not here and not at any other business: a charge that happened has to remain accountable for afterwards.
• This page describes how payment works today, with the review date at the top. If something changes, it changes here first.