Customers pay by card from the invoice's payment link. Connect your own Stripe account: the secret key starts the payment, the webhook secret proves it was Stripe that reported it. Both are stored encrypted. Without a provider, the payment page shows bank details only.