Stripe A/C id exposed or no process?

[champion96]

hello all, I have not posted much but have been very busy building a recycling app for a very long time as I began from knowing nothing really.
my app has sort of been built as I was learning and I have had some success now I think.
I think I’m also almost ready to launch.
I have an issue:
I built a comparison app for recycling that keeps track of sales and makes it easy for the customer to find the best deals and vendors can promote their products and update adverts as they become competitive.
it is a platform that allows a vendor to receive the payments directly and the platform receives a commission transferred later.
the problem I think of is that in order for the payment to be processed I would have to Expose the stripe Account Id to the customer else the payment can’t process… Im not convinced about doing this!! I have implemented some authentication between stripe and bubble and not sure if this would be negated by exposing the stipe a/c in some way to the customer.

I maybe thought of adding the customer to a temporary list whilst the transaction is ongoing and then removing the customer form the list afterwards.

the logic reads as … pay:current orders vendors stripe A/c
in the privacy rules Im not sure how I can implement this

one option which is time consuming is to redo the payments process so the platform receives the payments and then transfers the payment to the vendor but the transfer process may still expose the id.

so im confused at the moment and hope I can hear from someone to save my head from some of the time it may take
can anybody give us some advice or guidance

thanks

[champion96]

would a custom workflow or backend w/f allow me to not expose the stripe a/c id

how much of a security issue am I looking at if the id is exposed to the customer as some point

am I totally wrong here or is there a way I have missed of processing a transaction without the stripe a/c id

expression was lazy above

stripe account :

if you look at the last image I have only checked stripe a/c id just to say that the payment will only process wen this box is checked exposing the id to any customer logged in until the temporary exposure

am I overthinking things here Ill have to come back in a few hours

thanks

[alex.esposito.1108]

@champion96

would a custom workflow or backend w/f allow me to not expose the stripe a/c id

backend workflows are run on the server and are not visible to the users

@champion96

how much of a security issue am I looking at if the id is exposed to the customer as some point

Nothing can be done with the account ID unless they have your secret key as well