Privacy Policy

1. Who we are

Yonda Solutions LLC ("Yonda Solutions", "we", "us") is a software development company based in Westbury, New York. This policy explains how we handle information when you visit yondasolutions.com, use the free tools on it, contact us, or use our client portal.

2. Information you give us

Quote and contact requests

When you submit the quote or contact form, or email us, we receive the details you provide, such as your name, email address, phone number, company and a description of your project. Form submissions are delivered to our inbox at info@yondasolutions.com through our email provider. We use them to reply to you, prepare a quote and, if you become a client, to run the project.

Client portal

If you are a client, the client portal lets you sign in, follow your project, review invoices and pay. The portal uses:

• Firebase Authentication (Google) to create and secure your account, using your email address and sign-in credentials.
• Cloud Firestore (Google) to store your account profile and project records, such as milestones, files you share, messages, invoices and payment status.
• Stripe to process card payments. Card details are entered into Stripe's secure payment form and go directly to Stripe. We never see or store your full card number. Stripe tells us whether a payment succeeded so we can mark the invoice paid.

Website chatbot

The chat assistant on our website answers questions about our services. Messages you type are sent to our server and processed by Google Gemini to generate a reply. When you open the assistant from an AppScan result, it also receives a short summary of that result (hostnames and finding labels only, never the full page address or pasted email text). Please don't share sensitive personal information in the chat. Your conversation is saved in your own browser's local storage so it is still there when you change pages; you can remove it by clearing your browser's site data. If you ask for a quote through the chat, the details you give are emailed to us like a form submission.

3. The free AppScan tools

The AppScan page offers free tools. Each one processes only what you submit, only to produce the result you see, and we don't use it for anything else.

• Website scan. You enter a URL or domain. Our server fetches only that public page and runs Google Lighthouse (PageSpeed Insights) on it to produce the scores and findings. It does not sign in, submit forms or crawl beyond the page you entered. Results are returned to your browser and are not saved to a database.
• Link safety check. You paste a link. Its structure is analysed in your browser, then the link is sent to our server, which looks up the domain's registration date (public RDAP/WHOIS records) and checks the address against Google Safe Browsing. For known link shorteners, the server asks the shortening service where the link redirects, without loading the destination page. Your browser never opens the link. Lookups may be cached in server memory for a few hours to avoid repeat queries; they are not saved to a database.
• Email safety check. The email you paste is analysed entirely in your browser, and the message text never leaves your device. Only the web addresses found in it (up to five) are sent for the link check described above.
• Security guide. If you ask us to email you the free security guide, we use your email address once to send it through our email provider. We do not add you to a mailing list.

To prevent abuse, our servers apply short-term rate limits based on IP address. Please only scan sites you own or are authorised to test.

4. Information collected automatically

Google Analytics

We use Google Analytics to understand how visitors use the site: which pages are visited, how people arrive and their approximate location. Google Analytics uses cookies and collects device and browser information and an IP-derived approximate location. On this site it loads only after you first interact with a page (scroll, click, tap or key press). We use the reports to improve the website, not to identify you. You can opt out with the Google Analytics opt-out browser add-on or by blocking cookies. See our Cookie Policy for details.

Server logs

Our hosting and cloud providers (Google Firebase and Google Cloud) keep standard technical logs, such as IP address, browser type, time of request and errors, which we use for security and troubleshooting.

5. How we use information

• To respond to enquiries and prepare quotes
• To provide the free tools and the services you engage us for
• To run the client portal, send invoices and process payments
• To keep the website and our systems secure and prevent abuse
• To understand and improve how the website is used
• To meet legal, tax and accounting obligations

We do not sell personal information, and we do not use it for targeted advertising.

6. Who we share it with

We share information only with service providers that help us run the website and our business, and only as needed for that purpose:

• Google: Firebase Hosting, Firebase Authentication, Cloud Firestore, Cloud Functions, Gemini, PageSpeed Insights, Safe Browsing and Analytics
• Stripe: card payments
• Twilio SendGrid: delivering form submissions and the security guide by email
• Public domain registration services (RDAP and WHOIS): receive only the domain name being checked

If a client project includes a vetted specialist partner, that partner may receive project information under a written agreement that requires them to keep it confidential. We may also disclose information if required by law, to protect our rights, or as part of a sale or reorganisation of the business.

7. Security

We use encrypted connections (HTTPS) across the site, access controls on our systems and the security features of the providers above. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. How long we keep it

We keep enquiry emails as long as needed to respond and follow up, and client, invoice and payment records for the length of the business relationship and as required for tax and legal purposes. Free tool results are not stored, as described in section 3. You can ask us to delete your information at any time, subject to records we must keep by law.

9. Your choices and rights

You can ask us to access, correct or delete the personal information we hold about you, or to stop using it for a particular purpose. Depending on where you live (for example California), you may have additional rights under local law, including the right to know what we collect and not to be discriminated against for exercising your rights. To make a request, email info@yondasolutions.com. We will respond within 30 days.

10. Children

Our website and services are intended for businesses and adults. We do not knowingly collect personal information from children under 13. If you believe a child has sent us information, contact us and we will delete it.

11. Links to other sites

Our website links to other websites, including client sites and the third-party scanners offered by the link check. Their privacy practices are their own.

12. Changes to this policy

We may update this policy when our practices change. The "Last updated" date at the top shows when it was last revised.

13. Contact us

Yonda Solutions LLC
Westbury, NY 11590
Email: info@yondasolutions.com
Phone: (201) 285-4037