Security

If you found a security issue in Collectchat, we want to hear about it. This page explains how to report it and what we ask while we look into it.

Report a vulnerability

Email [email protected] with "Security report" in the subject. Please include:

• The page, API endpoint or chatbot link affected
• The steps to reproduce it, with screenshots or requests where they help
• What an attacker could do with it

We read every report, confirm when we have reproduced it, and tell you when it is fixed.

While you test

• Test only against your own account and your own chatbots.
• Don't open, change or delete anyone else's data. If you reach it by accident, stop and tell us.
• Don't run denial of service tests, send spam, or try to trick our team or our customers.
• Give us a reasonable time to fix the issue before you share it publicly.

Security reviews and DPA

For a vendor security questionnaire or our Data Processing Agreement, email [email protected]. Our privacy policy explains what we collect and how we use it.