Is the software vulnerable to credit card information?

The credit card information is encrypted and only stored for 30 days after the activity date.