How we protect your workshop's data
Yameen holds your customer list, your prices and your financial records. Here is plainly what we do to protect them, and what you can ask us for at any time.
01 Everything travels encrypted
All traffic between your browser and Yameen uses HTTPS with modern TLS. There is no unencrypted path into the system, on any device.
02 Passwords are hashed, never stored
Passwords are hashed with argon2id, a current, deliberately slow algorithm designed for exactly this. We cannot read your password, and neither could anyone who obtained a copy of the database. If you tell us you forgot it, the only thing we can do is send you a reset link — which is the correct answer.
03 Your workshop's data is isolated from every other
Every request is checked on the server against the workshop it belongs to. The system does not trust an identifier sent by a browser to decide what you are allowed to see — being logged in to one workshop gives you no path to another's records, whatever the request says.
04 People see what their role needs
Owner, Manager, Technician and Accountant each get a defined scope, enforced on the server rather than by hiding buttons. A technician cannot reach financial data by guessing a web address.
05 Sign-in is defended against guessing
Repeated failed sign-in attempts are rate-limited per account and per network, so an attacker cannot work through a list of common passwords. Authentication events are logged.
06 Backups run automatically
The database is backed up on an automatic schedule, and restores are tested rather than assumed to work. A workshop should never lose its history to a hardware failure.
07 Your data belongs to you
You can export your records at any time. If you ask us to delete your workshop, we will — and we will tell you what that removes and when, rather than quietly keeping a copy.