Yes, Donorbox is PCI compliant and all data including payments are protected by SSL. The plugin does not share or sell any customer information to any third party.