How are you protecting credit card data?

We use the Stripe API and they process our payments in a manner that is compliant with the PCI Data Security Standard. Basically, Stripe creates a one-way, single-use token in combination with a unique customer ID. This allows us to charge the card on a recurring basis without ever transmitting or storing the actual credit card number.