Data Handling Policy
Data minimization
Ylemos Inc. collects only the structured inputs and files required for the purchased work order. Customers must not provide Seller Central passwords, two-factor codes, payment card numbers, consumer personal information, or unrelated confidential files. Ylemos Inc. never asks for Seller Central login credentials under any circumstance.
Subprocessors
- PayPal — payment processing and card data; Ylemos Inc. never receives full card numbers. PayPal also receives the payer's email address and the work-order reference so a payment can be matched to an order.
- Cloudflare — website hosting, edge functions, and the work-order record store (Cloudflare KV, US/global edge network)
- Resend — transactional email delivery for order confirmations and ticket communication
- tawk.to — the live chat widget. When the widget loads it sets cookies and records visitor technical data (IP address, browser, pages viewed) and the content of any chat you start. Chat transcripts are stored by tawk.to and are visible to the Ylemos Inc. operator. Do not send passwords, card numbers or consumer personal data through chat.
No subprocessor is authorized to use customer data for any purpose other than operating Ryndix on Ylemos Inc.'s behalf.
Retention periods
- Unpaid intake drafts — kept in the customer's browser only; not transmitted to Ylemos Inc. until checkout, and expire when the browser storage is cleared
- Work-order records (ticket id, service, amount, contact email) — retained for 24 months after delivery to support the revision window, support requests, and dispute records, then deleted unless a longer period is required below
- Uploaded source files — deleted no later than 90 days after final delivery, unless the customer requests earlier deletion
- Payment records — retained by PayPal and in Ylemos Inc.'s accounting records for as long as standard US financial recordkeeping practice requires (commonly several years); confirm the exact period with an accountant
- Email/ticket correspondence — retained for 24 months for support and dispute continuity, then deleted on request
- Live chat transcripts — held by tawk.to and reviewed only to answer the enquiry; deleted on request
Security controls
The site is served over HTTPS/TLS with the security headers listed in _headers (frame denial, content-type sniffing protection, restrictive Content-Security-Policy). Work-order records are stored in Cloudflare's access-controlled KV store, reachable only from the site's own server-side functions, never from the browser. Access to production data is limited to the Ylemos Inc. operator and anyone specifically assigned to deliver a work order.
Incidents and deletion requests
To request deletion of your data, or to report a suspected security issue, email service@ylemos-inc.com with the ticket number if you have one. Ylemos Inc. will confirm receipt within 5 business days and resolve deletion requests within 30 days, subject to the payment-record retention above.