Engageware takes security and privacy very seriously for our users, our products and our staff. If you have discovered a vulnerability in our products, websites or support infrastructure, we encourage your help in mitigation by disclosing it to us in a responsible manner.

Engageware will engage with security researchers when vulnerabilities are reported to us in accordance with this Responsible Disclosure Statement. A reported vulnerability will be validated, cataloged and addressed in accordance with our posted commitments to security and privacy, as well as our other internal practices.

If you are the first to report a specific vulnerability and include detailed information sufficient to reproduce that vulnerability in your initial report, there may be a reward available for the research effort. Engageware will contact you if, at Engageware’s sole discretion, a reward is to be granted.

Engageware assumes no obligation to further communication once a report is submitted. Engageware will not take legal action against, suspend, or terminate access to the platform for those who discover and report security vulnerabilities in accordance with this Responsible Disclosure Statement.

Engageware reserves all legal rights in the event of any noncompliance with the following guidelines:

1. Do not disclose a bug or vulnerability into the public domain, without written consent from Engageware.
2. If a vulnerability is discovered, you are not authorized to exploit the vulnerability to compromise or expose any data. Additionally, you are not authorized to access, view, modify, delete, copy, capture or share any data exposed by the vulnerability.
3. Do not perform DDOS / spam attacks or degrade services in any way
4. Do not use scanners or automated tools to find vulnerabilities.
5. Do not install programs, scripts, malware on any Engageware resource, or use the resources to control or distribute the same.
6. Never perform phishing, social engineering or physical attacks against our users, employees, or infrastructure.
7. Do not engage in any activities that violate applicable laws.

How to Report an Issue

If you believe you have discovered a vulnerability, please contact issuereport@engageware.com. We request that you use the available PGP key below to secure your report to us.

In reporting vulnerabilities, please send details of:

• The suspected vulnerability and include reproduction steps that we can follow.
• A private, secure communication channel through which we can contact you such as your email address.