Is Voksha PCI compliant for collecting deposit or gift certificate payment information over the phone?

For Salons & Spas

Voksha is not designed to have callers read card numbers aloud for it to key in, which is the right approach given PCI DSS rules around handling cardholder data over voice channels. Taking deposits and payments is an Enterprise-only feature: on the Enterprise plan, when a caller wants to pay a deposit to hold a color appointment or buy a gift certificate, Voksha can text them a secure payment link through your existing payment processor, whether that is Square or another PCI-compliant gateway you already use. On Starter and Premium, Voksha notes the request and your team collects the deposit through your usual process. The card number itself is entered by the client directly into that processor's secure page, never spoken to or stored by Voksha. This matters for salons because deposit collection has become common for high-value services like bridal packages, extensions, and multi-hour color corrections, where no-shows are expensive, and it means you get the deposit-collection benefit without creating a new PCI liability by having an AI system capture raw card numbers over a phone call. If your current process involves a receptionist writing down a card number on a sticky note to charge later, moving to a payment-link flow is actually a compliance improvement, since it removes that handwritten card data entirely from your workflow. On Enterprise, this same link-based approach applies to deposits and gift certificate sales, so your PCI exposure stays with your existing processor rather than expanding to a new system.