Payment is processed securely by your configured provider (e.g. Stripe via Medusa).
Configure Stripe or PayPal in Medusa Admin. Legal/compliance for any convenience fee is your responsibility — see env template and service fee comments.