Storing the CVV permanently is indeed strictly forbidden. The CVV is not used for purchases on a stored card.