Responsible disclosure
Cartivale welcomes responsible reports of potential security vulnerabilities in its website and services.
Report privately
Email [email protected] with enough information to understand and reproduce the issue. Include the affected URL or component, reproduction steps and potential impact where possible. Do not include unnecessary personal data.
Test responsibly
Act in good faith and use only the minimum testing necessary to demonstrate the issue.
- Do not access, modify, delete or download other people’s data.
- Do not disrupt service availability or carry out denial-of-service, load or stress testing.
- Do not send spam, use social engineering or phishing, or attempt physical attacks.
- If testing unexpectedly exposes sensitive information, stop and report it privately.
Coordinate disclosure
Give Cartivale reasonable time to investigate and address the issue before disclosing it publicly. We will review good-faith reports and may contact you for additional information.
Other enquiries
This policy concerns security vulnerabilities in Cartivale. For product questions, feedback, feature suggestions, purchase or download problems and licensing questions, use Contact & support. For privacy or data-protection requests, follow the contact information in our Privacy policy.