Security

01This website

• Every page is served over HTTPS, and browsers are told to always use it.
• Pages load nothing from other websites: no trackers, ad scripts or outside fonts. A strict content policy tells browsers to block anything else, and stops other sites from embedding ours.
• We keep the site's software up to date and apply security fixes as they are published.

02What you send us

• Every form is checked on our server before anything is saved: the right fields, sensible lengths, a real email address.
• Forms are limited per visitor, so they can't be used to flood us or to send booking emails to strangers.
• Messages and bookings go to a private Google Sheet and inbox that only the Nyomik team can open, using a secret key that never reaches your browser.
• We collect only what the forms ask for. See our Privacy Policy for how long we keep it.

03Software we build for you

Security is part of how we build, not a step at the end:

• We agree access, data handling and who owns what in writing before work starts.
• Your code, accounts and keys stay in your name. We use the least access we need and hand everything back at the end.
• Secrets live in proper secret stores, never in code; every change is reviewed and tested before it ships.
• Systems we run for you are monitored, backed up and kept patched.

04Reporting a problem

If you think you've found a security issue in our website or products, email contact@nyomik.in with “Security report” in the subject. Tell us what you found and how to reproduce it.

We'll reply within 3 working days, keep you updated while we fix it, and credit you if you'd like. Please give us a fair chance to fix it before telling anyone else, and don't access other people's data or disrupt the site while testing.

05Contact

Email contact@nyomik.in, or write to Nyomik, 411, Vaibhav Laxmi, Bhestan, Surat, Gujarat, India. We reply within 30 days, usually much sooner.