Ideally you would want to onboard your clients to set up the workspace so they link their card details. They would grant you access and monitor the usage on their side without you involved. But it depends what kind of agreement you reached