Security

The operator of this server hasn’t published a security contact yet.

What happens with a report

1. We confirm receipt within three working days.
2. We reproduce it, rate the impact and tell you what we will do and roughly when.
3. We fix it, tell affected customers where needed and credit you if you want.

Please don’t access other people’s data, run denial-of-service tests or use automated scanners against production. Testing your own account is fine.

Safeguards in place

• Every record is checked against the signed-in account; an automated test probes each ID route with a second account.
• Store and tracking tokens are encrypted at rest; critical changes ask for the password again.
• Ad, page and transcript text is treated as data, never as instructions for the AI.
• Secrets are removed from logs and error messages; errors carry a problem ID instead.
• Support has no access to your workspace. There is no hidden administrator login or impersonation.

This describes our practices. It is not a certification or audit result. See also privacy and data handling.