Security

Email security@viewgum.com with what you found, the steps to reproduce it and the account or URL involved. Send only what is needed to show the problem. We reply within 5 business days, tell you when it is fixed, and credit you in our reply if you want that.

In scope: viewgum.com and its API.

Out of scope: denial of service, spam, social engineering or phishing of our staff or users, physical attacks, and reports from automated scanners that show no real impact. Do not read, change or delete data that belongs to another person. Stop and tell us if you reach it by accident.

If you act in good faith, stay in scope, avoid harm to users and their data, and give us a reasonable time to fix the problem before you share it, we will not take legal action against you or ask a platform to act against you for the research.

We do not run a bug bounty and do not promise payment for reports.