Responsible Disclosure Policy

We take security seriously and appreciate the efforts of security researchers who help keep Spyda and our users safe.

How to Report

If you believe you've found a security vulnerability, please email us at security@spyda.ai with:

  • Description of the vulnerability
  • Steps to reproduce
  • Potential impact
  • Your contact information

What to Expect

  • Acknowledgment within 48 hours
  • Regular updates on our investigation
  • Credit for the discovery (if desired)
  • No legal action for good faith security research

Guidelines

  • Do not access or modify user data
  • Do not perform destructive testing
  • Do not publicly disclose the issue before we've addressed it
  • Act in good faith to avoid privacy violations