Security.

How to report a problem

Email security@getadvicity.com. A person reads it. If you would rather talk first, say so in the email.

Please do not post the problem in public until we have fixed it. Please do not include a member’s private words in your report: describe where you found them instead.

What to include

• What you found and where (the page, the address, or the screen).
• The steps to see it again, in order.
• What you think someone could do with it.
• How to reach you, and whether you would like to be thanked by name.

What to expect

• We write back to say we have your report.
• We look into it, and tell you what we found.
• We fix real problems, and tell you when it is fixed.
• If we thank you by name, it is only if you ask us to.

We do not pay rewards for reports.

What this covers

The Advicity website and app at getadvicity.com. A problem in a company we depend on is still worth telling us about, and we will pass it to them.

Rules for testing

We will not take action against you for a good-faith report that follows these rules.

• Use your own account. Do not open, change or delete anyone else’s information.
• Stop as soon as you can see that a problem is real. Do not keep going to see how far it reaches.
• Do not slow the service down on purpose, and do not send spam or run automated attacks.
• Do not try to trick our team or our members, in person, by email, or by phone.

Where the rest is written

How your data is kept safe is in the privacy promise. How we handle it is in the privacy policy.

A machine-readable version of this page is at /.well-known/security.txt.