What Payment Info Can a Creator See When You Pay Them?

When you pay a creator on Brillay, they see the name or @social handle and email you entered at checkout, the amount paid, and which offer you bought. They never see your full card number, your card's security code, or your bank account — those stay with Stripe, the payment processor. Brillay's own checkout form does not ask for a billing address, though Stripe's card form still collects a postal code in some countries. Tips let followers send a one-time thank-you, with nothing for you to deliver and no membership for them to join.

What a creator can and cannot see: field-by-field comparison

What the creator sees depends on what you buy: the order fields are the same on every offer — name or @social handle, email, amount, and the offer itself — and only the request text or files you add differ. Your full card number, security code, and bank account never reach the creator. The table below maps each checkout field to who holds it and whether a creator can view it.

No monthly fee, you only pay a small platform fee when you get paid. 8% platform fee when a follower pays for work, 5% platform fee on tips and goals. Card processing is separate. pricing

Stripe's handling of card fields is a certification requirement rather than a Brillay promise. A PCI-certified auditor has evaluated Stripe and certified it to PCI Service Provider Level 1, the highest of the four PCI DSS validation levels and what Stripe calls "the most stringent level of certification available in the payments industry" (Stripe, Security at Stripe).

What does a creator see about you after you pay on Brillay?

The details a creator sees depend on whether you used Paid Questions, Personalized Videos, Custom Work, Tips, or contributed to Goals. That information sits on the single order tied to that purchase, not on a browsable follower profile.

Brillay describes the follower side of a purchase as "checking out as a guest by card, with no account to create and no app to install," with the request landing "in your creator inbox as a private message" (how it works). A guest checkout of that shape asks for two identity fields before payment — an email for the receipt and a name or @social handle — and no mailing address or phone number. Whatever you type into those two fields is exactly what appears on the creator's side, so a handle entered instead of a legal name is the only name the creator ever sees. Knowing what that checkout collects is one part of the question; confirming a creator's payment page is legit before you type anything into it is the other.

Does a creator see your full card number or security code?

No to both. Followers pay before you do the work; you deliver on your own time — see entering card info on a small creator's page. Brillay's privacy policy states: "Payments are processed by Stripe. We do not store full card numbers".

"Your customers' card information never touches your servers." — Stripe, PCI compliance guide

Stripe encrypts every stored card number at rest with AES-256 and keeps the decryption keys on separate machines, in an isolated hosting environment that shares no credentials with Stripe's API or website. Stripe adds that none of its own internal servers can obtain plain-text card numbers, which is a stricter boundary than anything a merchant dashboard could enforce on its own.

The three- or four-digit security code is governed by an industry rule rather than by any single company's policy. PCI DSS Requirement 3.3.1.2 requires card verification codes to be discarded after payment, even if encrypted (PCI Security Standards Council, FAQ on card-verification codes). That prohibition sits inside a standard that was recently tightened rather than a legacy rulebook: the PCI Security Standards Council reports that of the 64 new requirements added in PCI DSS v4.x, 51 were future-dated and became effective on 31 March 2025.

One honest nuance is worth stating plainly. Because Brillay charges run on the creator's own connected Stripe account, a creator who opens their embedded Stripe payments view sees the processor-level record for that sale (Stripe, Connect embedded payment details component) — the same merchant-side detail any shop sees for its own transactions, which for card payments includes the card brand and the last four digits. Even that view is capped by the standard: PCI DSS v4.0.1 Requirement 3.4.1 states that the BIN and the last four digits are the maximum number of digits that may be displayed (PCI Security Standards Council, PCI DSS v4.0.1). The full card number, the security code, and your card's authentication data appear in neither Brillay's records nor the creator's Stripe view.

Does Stripe collect your billing address or ZIP code at Brillay checkout?

Brillay's own checkout form never asks for a billing address. Stripe's card form uses Stripe's default setting and can ask for a postal code. Stripe's API reference documents that default as auto, under which "Checkout will only collect the billing address when necessary" (Stripe, Create a Checkout Session).

In practice, Stripe's auto billing-address setting behaves differently by region. Stripe's changelog entry dated 30 September 2025 records that a postal code is no longer collected for card payments on Checkout and Payment Element in exactly three regions — Canada, the United Kingdom, and Puerto Rico — where previously it was always collected under the auto setting (Stripe, changelog 2025-09-30). A US card payer should therefore still expect Stripe to ask for a ZIP code on the card form. Any postal code you type is collected by Stripe for card verification and does not appear on the creator's Brillay order record. "Brillay does not ask for a billing address" is therefore a statement about Brillay's own form, not about Stripe's card form.

What does a creator see when you send a Paid Question?

A creator sees the text you write, plus the same order fields attached to every Brillay purchase: name or @social handle, email, and amount. Paid Questions let a follower send one written question and receive one written reply.

A creator sets two things for Paid Questions, the price and the reply time, and can decline a question rather than answer it.

What does a creator see for Custom Work or Personalized Videos?

A creator sees whatever you voluntarily attach to the request, on top of the same four order fields. Custom Work lets a follower attach up to five files, while Personalized Videos collect written request details and the creator delivers one video.

Brillay documents the exact delivery envelope for Custom Work: a written note plus up to 5 files — video, audio, images, PDF, Word, Excel, or PowerPoint, with video and audio up to 20 minutes — and optionally a private link for anything larger. The creator sets the delivery time, and Brillay's guidance gives 3–5 days as an example.

A file you attach is a difference in what you voluntarily submit, not a difference in payment data. A resume uploaded for a service review is content you chose to share for that specific request — it is not card or billing information, and a creator can decline a request that falls outside what they scoped.

Can a creator see your other Brillay purchases or payment history?

No. A Brillay creator sees only the orders placed with them, tied to the specific thread or request. A creator cannot see whether you tipped or purchased from a different creator on Brillay, and no running profile of your platform-wide spending appears anywhere in the creator inbox that Brillay gives each creator. That same order record is also what typically counts as evidence in a payment dispute if a charge is ever contested.

Each creator sees only purchases made with them; Paid Questions are handled privately, Custom Work is delivered once, Personalized Videos show delivery status, and Goals show progress. Brillay's privacy policy adds three published rules that keep a thread scoped to the two people in it — "Private request threads are accessed through a secure, unguessable token link tied to the follower's email," "A follower's email is never shown publicly," and anonymous follower wall entries display as "Anonymous Follower".

Does a creator see your bank account or payout details?

No, and no bank detail of yours ever enters the flow. As a follower you pay by card at checkout and are never asked for an account or routing number. Bank details exist only on the creator's side of the transaction, where a payout account is required to receive money rather than to spend it.

Brillay states that it "pays out to your bank account through Stripe" and that a creator connects that account "once during setup" — a step that happens in the creator's own Stripe onboarding, entirely separately from any follower's card. Stripe says it treats bank account information much as it tokenizes card numbers, holding it in an isolated environment whose access is restricted to a small number of specially trained engineers and reviewed once every quarter. The creator-side version of this question is covered in Brillay's guidance on whether it's safe to share your bank details to get paid as a creator.

Who besides the creator can see your payment information, and which fields do they get?

Four parties touch part of a Brillay payment, and each receives a different slice: Brillay holds the order record, Supabase stores that record and any uploaded files, Stripe handles the card fields, and Resend delivers the transactional email. No advertiser, data broker, or other creator sits anywhere in that chain.

Brillay's privacy policy states: "We share data only with the processors needed to run the service: Supabase (database, auth, storage), Stripe (payments and payouts), and Resend (email). We do not sell personal data".

Of Brillay, Supabase, Stripe, and Resend, only Stripe is a card payment processor: Supabase is a database and storage provider and Resend is an email provider, so neither ever receives card data. Supabase publishes that it is SOC 2 Type 2 compliant and that Enterprise and Team customers can access its SOC 2 Type 2 report from the dashboard. Stripe protects the payment fields in transit as well as at rest — Stripe mandates HTTPS with TLS for all services and automatically blocks requests made using anything older than TLS 1.2.

The accurate claim about who sees a Brillay payment is therefore narrower than "nobody else" and also narrower than "three processors see everything." Beyond those four parties, Brillay's terms add that Brillay may cooperate with Stripe, card networks, law enforcement, or rights holders where appropriate. No other creator, brand, advertiser, or data buyer appears anywhere in that list. A checkout that runs through a named processor, shows the creator's real page, and never asks you to pay outside the flow is the basic signal worth checking — see Brillay's safety page for the fuller checklist.

Frequently asked questions

Six questions come up most often about Brillay follower checkout: whether a creator sees your card's last four digits, whether they see your other purchases, whether a mailing address is collected, whether Stripe asks for a ZIP code, whether a handle can replace a legal name, and whether card details reach a creator's bank.

Does the creator see my card's last four digits?

No. The Brillay order and the creator's inbox hold no part of your card number. Because the charge runs on the creator's own connected Stripe account, a creator opening their embedded Stripe payments view sees the standard merchant-side payment record for that sale, which for card payments includes the card brand and last four digits — the same detail any shop sees for its own transactions. PCI DSS v4.0.1 Requirement 3.4.1 caps that display at the BIN and last four digits (PCI Security Standards Council).

Can a creator see other things I've purchased on Brillay?

No. A Brillay creator sees only the order or thread tied to the specific purchase you made with them, never your activity with other creators on the platform.

Does the creator see my physical mailing address?

No. Followers pay by card as guests, entering an email and a name or @social handle rather than a mailing address, and Brillay offers nothing to ship.

Will Stripe ask me for a billing ZIP code?

Probably, if you are paying with a US card. Stripe's Checkout default is auto, which "will only collect the billing address when necessary", and Stripe stopped collecting a postal code for card payments in Canada, the United Kingdom, and Puerto Rico as of its 30 September 2025 change. Any ZIP you enter goes to Stripe, not to the creator's Brillay order record.

What if I don't want to use my real name at checkout?

You can enter a name or @social handle instead of your legal name — that is exactly what the "Name or @social" field is designed for, and whatever you enter there is what the creator sees.

Does Brillay share my payment details with the creator's bank?

No. A creator's bank account is connected separately through their own Stripe payout setup and has no link to your card details as a paying follower; Stripe handles the two in entirely separate steps.

Paying a creator directly doesn't have to mean guessing what they can see about you. Create your free Brillay page and every follower checkout on it follows the same rule: name or handle, email, and amount only — nothing more.