# HumanFlow — security contact, per RFC 9116.
#
# The /security page already carried a "Reporting a vulnerability" section in
# prose. This file is the machine-readable form of the same thing: it is what
# automated scanners and most researchers look for before they look at a page.

# humanflow.pro is operated by Lacewing Technologies LLC,
# 30 N Gould St, Ste N, Sheridan, WY 82801, United States.

Contact: mailto:support@humanflow.pro
Contact: https://www.humanflow.pro/security

# RFC 9116 requires this, and a stale file is treated as no file at all.
# Roll it forward at every annual legal review.
Expires: 2027-08-04T00:00:00.000Z

Preferred-Languages: en
Canonical: https://www.humanflow.pro/.well-known/security.txt
Policy: https://www.humanflow.pro/security

# We will not pursue legal action against researchers who act in good faith:
# who stay within their own accounts and test data, avoid privacy violations
# and service degradation, and give us a reasonable window to fix an issue
# before disclosing it publicly. Tell us what you found and we will confirm
# receipt and keep you updated.
#
# We run no paid bounty programme and we do not pretend otherwise.