Thanks! To answer your questions:

1) Rails 2) WePay handles our transactions so they're secure - we use their new API. We highly recommend them. You can learn more about their security here: https://www.wepay.com/about/security 3) We actually already use Postmark. That being said, we'll check out PostageApp too :)