Responsible Disclosure Policy

Our commitment

We want to hear about security problems in Nubo Suite and we will not take legal action against people who act in good faith under this policy.

Scope

In scope: nubosuite.tech, home.nubosuite.tech, api.nubosuite.tech, the Nubo apps on *.nubosuite.tech and nubo.email.

Out of scope: third-party services, denial-of-service testing, social engineering of our staff or customers, and physical attacks.

How to report

Write to support@nubo.email with the steps to reproduce, the affected URL or app and the impact. Do not include other people’s data.

Rules

• Test only against your own accounts.
• Do not read, change or delete other people’s data.
• Stop once you have shown the problem, and give us a reasonable time to fix it before you share details.

What happens next

We acknowledge reports within 5 business days (Monday to Friday, India), keep you updated and tell you when it is fixed. We are glad to credit you if you want. We do not run a paid bounty program at this time.