Security and Responsible Disclosure
We take the security of AskTufti and our users' conversations seriously. If you find a vulnerability, please tell us privately so we can fix it.
1. How to report
Email security@asktufti.com with a description, steps to reproduce, and the impact you believe it has. We will acknowledge your report within 5 business days and keep you updated.
2. Please do
- test only against your own account;
- stop and report as soon as you can show the issue;
- give us reasonable time to fix it before you share details publicly.
3. Please do not
- access, change or delete other people's data;
- run denial-of-service, spam or automated scanning that degrades the service;
- use social engineering or physical attacks;
- try to exhaust usage limits or run up AI costs.
4. Our promise
If you act in good faith and follow this policy, we will not pursue legal action against you for your research, and we will credit you if you wish once the issue is fixed. We do not currently offer paid bounties.