Privacy Policy

Effective: July 13, 2026

1. Information we receive

We receive purchaser email, billing identifiers, payment status, target URL, access selection, requested test window, authorization and scope information, emergency contact details, communications, and the technical evidence required to deliver a confirmed engagement. Stripe processes card and billing details under its own privacy terms; we do not receive full card numbers.

2. How we use information

We use information to validate authorization, accept or refund orders, perform the agreed test, communicate safety issues, produce and deliver reports, verify fixes, prevent fraud and unauthorized testing, maintain business records, and comply with law. We do not sell personal information or use customer findings for advertising.

3. Security-test data

Reports and non-public evidence are confidential and access is limited to people needed to deliver the engagement. Customers should provide temporary least-privileged accounts and avoid real personal data where possible. Credentials are not collected through Stripe or public website forms and are deleted after the engagement or retest window.

4. Website and providers

The website is delivered through Cloudflare and our hosting infrastructure, which may process IP addresses, security signals, and ordinary request logs. Stripe processes payments. Google Search Console may provide aggregate search-performance data. The launch website does not use advertising trackers.

5. Retention

Working evidence and report delivery copies are normally deleted within 90 days after delivery or completion of the included retest, unless earlier deletion is requested or longer retention is required for a dispute, fraud prevention, tax, accounting, or law. Transaction and authorization records may be retained as legally required.

6. Rights and contact

You may request access, correction, or deletion of eligible personal information by contacting support@ynm3000.com. We may need to verify your identity and retain records that cannot legally be deleted.