# Security contact for https://www.flowss.ai

Contact: mailto:hello@flowss.ai
Expires: 2027-04-10T00:00:00Z
Canonical: https://www.flowss.ai/.well-known/security.txt
Preferred-Languages: en

# What we commit to, for a report made in good faith:
#   - an acknowledgement within three working days;
#   - an assessment, and our intended fix or our reasons for declining,
#     within fourteen days;
#   - credit in our release notes on the blog if you would like it.

# Safe harbour. We will not pursue or support legal action against
# research conducted in good faith under this policy: test only against
# accounts you own, do not access or modify other people's data, do not
# degrade the service for others, stop as soon as you have proof, and
# give us a reasonable window before disclosing.

# There is no bug bounty and no payment for reports. Said here so
# nobody learns it after the work is done.