Security Disclosure Policy

We value the work of security researchers and the role they play in keeping our users safe. If you believe you’ve discovered a vulnerability in our systems, we ask that you report it to us responsibly.

Please email infosec@upfirst.ai with details of the issue, including steps to reproduce. We’ll investigate promptly and work with you to address it.

We ask that you:

• Don’t exploit the vulnerability beyond what’s needed to demonstrate it.
• Don’t access or modify other users’ data.
• Give us reasonable time to investigate and fix before public disclosure.

‍

We won’t pursue legal action against good-faith research that follows these guidelines.

Thank you for helping us protect our community.