Security policy
Reporting security vulnerabilities
At DebtFlow, we take security very seriously. If you discover a security vulnerability in our system, please report it to us responsibly.
How to report a vulnerability:
- Send an email to [email protected]
- Provide detailed information about the vulnerability
- If possible, include steps to reproduce the issue
- Attach any relevant screenshots or videos
Our commitment:
- We will acknowledge your report within 48 hours
- We will investigate and fix the vulnerability as quickly as possible
- We will keep you informed of our progress
- Once the issue is fixed, we will credit you appropriately if you wish
Responsible disclosure policy
We ask you to handle any vulnerabilities you discover responsibly:
- Give us reasonable time to respond to your report before you publish any information about it
- Avoid any action that could affect the availability, integrity or confidentiality of our systems
- Do not access or modify other users’ data
- Let us know immediately if you accidentally access such data
We will not take legal action against anyone who reports security vulnerabilities in good faith and in line with this policy.
Contact
If you have any questions about the security of our platform, please contact us at:
[email protected]