Yes, this is correct. We do not trade in product ourselves and merely provide the platform and tech support for vendors to market and sell their goods.
Regarding the sign-in: While we acknowledge that this may be a friction point for new users, it is one of the requirements for PCI DSS compliance.