Security Policy

switchgeardeals (the "Site", at switchgeardeals.com) is managed by SKYLIGHTS ENERGY ("Skylights Energy", "we", "our" or "us") for VendorStocks, the marketplace for electrical switchgear and components that Skylights Energy operates. The Site exists for backlinking and informational content: it links buyers to vendorstocks.com and publishes general information about switchgear. That shapes its security:

• Nothing to sign in to: the Site has no accounts, passwords or one-time codes, and it will never ask you for them.
• Nothing to pay for: the Site never asks for card numbers, UPI PINs, bank details or any other payment information.
• No personal data stored: the Site has no forms or database, so it holds no customer data that could be exposed.
• Marketplace security is on VendorStocks: accounts, verification documents, invoices and payments are protected by the VendorStocks safeguards described below.

• HTTPS
• Static site, no database
• No logins or passwords
• No payments
• No third-party scripts

• HTTPS encryption

  Every page is served over HTTPS, so what you read cannot be read or altered in transit.

• Static by design

  The Site is pre-built HTML and CSS, checked automatically before each release. There is no server-side code, database, login or form to target.

• No third-party scripts

  The Site loads no advertising, analytics or tracking scripts. Fonts, images and icons are all served from the Site itself.

• Safe outbound links

  Links to VendorStocks, Google Calendar and WhatsApp open in a new tab with rel="noopener", so the page you open cannot control this one.

When you follow a link to vendorstocks.com, the marketplace's own safeguards protect your account, data and payments. As described on the VendorStocks Security page, they include:

• Encryption: TLS 1.3 in transit and AES-256 at rest, with HTTPS enforced everywhere
• Secure authentication: securely hashed credentials, short-lived sessions and monitoring of sign-in activity for anomalies
• Data protection: role-based access control and row-level security that isolate each organisation's data, with verification documents in access-restricted storage and audit logging
• Vendor verification: PAN, GSTIN and business registration reviewed before a seller is activated. Verification reflects review, not endorsement.
• Fraud prevention: monitoring for fake listings and fraudulent transactions, with automated checks, rate limiting and bot protection
• Payment security: payments processed by PCI-DSS compliant gateways (Razorpay / PayU). Full card numbers, CVVs, UPI PINs and net-banking credentials are never stored.

We welcome reports from security researchers and users who find a potential vulnerability in the Site or in VendorStocks. Please disclose it to us responsibly, so we can protect users while it is fixed.

How to report

1. 01

   Email the security team. Send a detailed report to support@skylightsenergy.in with a subject line that begins with "Security". Include steps to reproduce, the affected URLs and any supporting evidence.

2. 02

   Give us time to investigate. We acknowledge reports within 3 business days and work to validate and fix confirmed issues as quickly as possible.

3. 03

   Disclose responsibly. Do not publicly disclose the issue, access or modify other people's data, or degrade the service while we investigate. Acting in good faith under this policy will not result in legal action from us.

Please avoid

• Accessing, downloading or modifying data that does not belong to you
• Denial-of-service testing, spam, or social engineering of our staff or users
• Automated scanning that degrades performance for others
• Publicly disclosing a vulnerability before it has been resolved

• Check the address: the Site has no login. Enter your VendorStocks password only on vendorstocks.com, and check the address bar first.
• Never pay through this Site: if a page or message claiming to be switchgeardeals asks for payment, card details or a password, it is not from us.
• Verify before you transact: confirm seller details, catalogue numbers and order terms on VendorStocks before making a payment.
• Report anything suspicious: unexpected emails, listings, messages or sign-in alerts should be reported straight away.
• Keep your device secure: use an up-to-date browser, and avoid signing in on untrusted networks or shared devices.

No system is ever completely immune to risk. We keep reviewing and strengthening these safeguards, and we count on buyers, sellers and researchers to help keep switchgeardeals and VendorStocks safe.