Security

This website

• All pages are served over HTTPS, so information sent through our forms is encrypted in transit.
• Estimate and contact forms are checked on our server, not only in your browser. Submissions are validated, size-limited and rate-limited, and include spam protection.
• Forms only accept requests that come from this website, which protects against cross-site request forgery.
• We do not collect payment card details on this website.
• IP addresses connected to form submissions are stored only as a keyed one-way hash, used to prevent abuse and to keep a record of consent choices.

Enquiries and estimates

• Enquiry and estimate details are stored in a private database that is not publicly accessible. See our Privacy Policy for what we collect and why.
• Our internal lead dashboard requires a server-side sign-in. Passwords are stored only as strong one-way hashes, sessions use signed, HTTP-only cookies, and repeated failed sign-ins are blocked.
• API keys, email provider credentials and other secrets are kept in server configuration. They are never included in the website code sent to your browser.
• Links in our marketing emails use signed unsubscribe tokens, so they never contain your email address or an internal database ID.

Seller Operations Platform

Our Seller Operations Platform is private software in development. It is being built so that:

• it connects to marketplace services only with the seller’s authorisation and appropriate API access;
• access is limited to authorised users of the business that owns the seller account;
• credentials and marketplace data are not shared with third parties except where required by law; and
• marketplace data is kept only for as long as it is needed to operate the authorising seller’s business.

Reporting a security issue

If you believe you have found a security vulnerability in this website or our software, please email admin@gyandatabit.com with the subject “Security report”. Include enough detail for us to reproduce the issue. Please don’t access or change other people’s data, and give us reasonable time to fix the issue before sharing it publicly.

Changes

We update this page as our website and products change. The date at the top shows when it was last updated.