The site is currently open to only Indian citizens and yes, we will require PAN.We have taken certain measures to protect user details and will keep on improving them. Even if the site is hacked, neither any monetary loss can occur nor PAN details will be compromised.
Security Features(some still to be implemented before the launch)
1.sha1 encryption for passwords
2.encryption for what ever data is transfered
3.ssl keeps data over network secured
4.cookies for maintaining session which is also secured by encryption plus ssl
About Us
Plain hashing is highly insecure for passwords. sha1 is not encryption. The passwords are just begging to be stolen. You have to spend a lot of time learning about security best practices, and you should pause release until then. Please use bcrypt, pbkdf2 or scrypt.
Excellent point. Thumbs up for you!
Ignoring the security of your customers, is not a wise thing to do...