Vulnerability Disclosure Policy

1. Our commitment

We take the security of Textent and our users seriously. We welcome reports from security researchers and users, and we are committed to working with you to verify, reproduce, and resolve valid issues. This policy explains how to report a vulnerability and what you can expect from us.

2. Scope

This policy applies to the Textent applications, websites, and APIs that we operate. It does not cover third-party services we integrate with, which are governed by their own programs. If you are unsure whether something is in scope, contact us before testing.

3. How to report

Please email [email protected] with enough detail for us to reproduce the issue: a description of the vulnerability, the affected component or URL, the steps to reproduce, and any proof-of-concept material. Encrypted reports are welcome; ask us for a key if you need one.

4. Guidelines for researchers

When investigating, please:

• act in good faith and avoid privacy violations, data destruction, and service disruption;
• only access or modify data that belongs to you or to a test account you control;
• do not run automated scanning that degrades the Service, and respect our rate limits;
• do not use social engineering, physical attacks, or denial-of-service techniques;
• give us a reasonable time to investigate and remediate before any public disclosure.

5. What you can expect from us

• we will acknowledge your report, typically within a few business days;
• we will keep you informed as we investigate and work toward a fix;
• we will not pursue legal action against researchers who act in good faith and follow this policy;
• with your permission, we are happy to credit you once an issue is resolved.

6. Safe harbor

Activity carried out in line with this policy is considered authorized, and we will not treat it as a violation of our Acceptable Use Policy or Terms. This is not a paid bug-bounty program unless we state otherwise in writing.

7. Contact

Report security issues to [email protected].