Best Practices (CyberPC review-tested): Use CIM to store CC data
temporarily—delete guest profiles after capture and registered users’
data if opted out. Refunds via Auth.net’s transaction ID, no stored
profiles needed. Skip pre-auth: tokenize at rev...