We take the security of our app and your data seriously. This document outlines our policy for security vulnerabilities.

Reporting a Vulnerability

If you discover a security vulnerability, please report it to us by emailing [email protected]. We take all reports seriously and will investigate them promptly.

We appreciate the efforts of security researchers and will work with you to resolve any issues you find.

Incident Response

In the event of a critical security vulnerability, our priority is to protect our merchants and their customers. We reserve the right to deploy a fix without immediately disclosing the vulnerability's details to prevent potential exploitation.

Our standard response process is:

1. Silently deploy a fix to our production systems, securing all merchants.
2. After a fix is confirmed to be effective, we will disclose the nature of the vulnerability and, with their permission, credit the reporter.

We may adjust this timeline to best ensure the security of our users. For example, we might notify specific merchants directly before a wider public announcement if appropriate.

Emergency Measures

During a severe and active incident, we may need to temporarily disable parts of our service to prevent further harm. We will work to restore full functionality as quickly as possible and will strive to keep affected merchants informed.