Billing & Payment Compliance

How the MyKids-USA® Retailer App charges merchants, and why it is PCI compliant.

The app never processes, transmits, or stores cardholder data, and it does not use its own payment gateway. There are two separate types of charges, and each uses a Shopify-native, PCI-compliant mechanism.

1. App subscription charges — Shopify Billing API

All charges for the app itself (the Basic, Pro, and Business plan subscriptions) are billed exclusively through Shopify's Billing API using appSubscriptionCreate. The merchant approves the recurring charge inside Shopify's own confirmation flow. The Free Discover plan is $0 and creates no charge.

2. Cost of goods (wholesale) — Shopify Checkout

When a retailer requests fulfillment of an order, the app collects the wholesale cost of goods through Shopify's own hosted Checkout:

• The app creates a Shopify Draft Order on the MyKids-USA® supplier store (a standard Shopify store) containing the wholesale line items.
• The merchant receives a Shopify invoice and pays through Shopify Checkout (Shopify Payments) on that store.
• Payment is processed entirely by Shopify's PCI-DSS-compliant checkout. The app only stores the Shopify-generated invoice URL and the resulting paid / fulfilled status.

Because the wholesale payment runs through Shopify Checkout, no card data ever touches the app's servers.

Summary

App subscriptions → Shopify Billing API. Cost of goods → Shopify Checkout (Shopify Payments), a PCI-compliant gateway. The MyKids-USA® Retailer App handles no card data of any kind.