Security and responsible disclosure

Email AudioRealityAI@gmail.com with a clear description, affected URLs or features, impact, and reproduction steps. We aim to acknowledge reports within 72 hours and will keep you informed as we investigate. With your permission, we will credit you when a fix ships.

We ask that you:

• Avoid privacy violations, data destruction, and service degradation.
• Use test accounts and do not access another user's data.
• Do not test spam or volume limits against production email infrastructure.
• Give us reasonable time to remediate before public disclosure.

We will not pursue legal action against good-faith research conducted under this policy. If your work is consistent with these guidelines, we consider it authorized for the purpose of applicable computer access laws.

AudioReality does not currently offer a bug bounty. Please do not include passwords, access tokens, private feed URLs, or other secrets in an initial report.