Yes. All payments in Karma goes through our third party payment service provider called Stripe.
When you add a bank or credit card, your information is saved in Stripe, meaning we don't store the details ourselves.
Stripe has been audited by a PCI-certified auditor and is certified to PCI Service Provider Level 1. This is the most stringent level of certification available in the payments industry. If you want to read more about Stripe payments and security, you'll find more info here: https://stripe.com/about