Responsible Disclosure Policy

Last updated: 24 July 2026

Draft for review. This document is a template prepared for Planquora and has not yet been reviewed by legal counsel. It is provided for transparency and is not a substitute for professional legal advice.

We welcome reports from security researchers and will not pursue legal action against good-faith research conducted under this policy.

Scope

planquora.com and the Planquora application. Do not test third-party services we rely on.

Guidelines

Do not access, modify, or delete data that is not yours; use only test accounts you control.
Do not run denial-of-service tests, spam, or social-engineering attacks.
Give us reasonable time to remediate before public disclosure.

How to report

Email [email protected] with steps to reproduce and any supporting evidence. We aim to acknowledge within a few business days.

Recognition

We are grateful for responsible reports and will credit researchers who wish to be acknowledged once an issue is resolved.

Questions about this document? Contact [email protected]. See all policies in the Legal Center.