Security & Trust

We take the security of your data seriously. This page sets out the measures we have in place. We describe only what is actually true of the service today — we do not claim certifications we do not hold.

Where your data is hosted

Personal data is hosted in the European Union — the Frankfurt region (eu-central-1) — on Amazon Web Services (AWS), which operates data centres with strong physical and operational security.

Encryption

Traffic between your browser and the service is encrypted in transit using TLS (HTTPS). Account passwords are never stored in plain text — they are stored as salted hashes.

Payments

Payments are handled by Paddle as our Merchant of Record. Card details are entered directly with Paddle and are not stored on our systems.

Data protection practices

Our practices are aligned with the UK GDPR and the Data Protection Act 2018. We collect only the data we need, restrict internal access to administration and analytics purposes, and do not access the contents of individual customer accounts. For full detail, see our Privacy Policy.

Data-subject requests

You can ask us to access, correct, export or delete your personal data at any time. Email our team at admin@yatedlabs.com and we will respond within the timeframes required by law.

Reporting a concern

If you believe you have found a security issue, please contact us at admin@yatedlabs.com so our team can investigate.