Report a security issue

If you think you've found a security or privacy issue in HAIQ, we want to hear about it. Email security@haiqup.ai. The same contact is published in our security.txt.

What to include

• the URL or component affected;
• steps to reproduce, and what you expected to happen;
• the impact as you understand it;
• how you'd like to be credited, if at all.

Please don't include anyone else's personal data. If you came across some, stop, tell us, and don't keep a copy.

What you can expect from us

• We aim to acknowledge your report within three business days.
• We'll keep you updated while we investigate and fix it.
• With your permission, we'll credit you once it's fixed.

Good-faith research

We won't pursue legal action against research done in good faith within this policy: you avoid harming people and data, you don't degrade the service, you stop at proof of concept, and you give us reasonable time to fix the issue before disclosing it.

Scope

In scope: haiqup.ai and its subdomains. Out of scope: denial of service, volumetric or automated scanning that degrades the service, social engineering, physical attacks, and issues in third-party services we don't control. We don't run a paid bug bounty at this time.