Responsible Disclosure

1. Our commitment

We take security seriously and welcome reports from researchers acting in good faith. If you believe you have found a vulnerability in our website or services, we want to hear from you.

2. Scope

This covers systems operated by AiMavrik (Aimavrik Technologies LLP), including aimavrik.com and, in future, the AiMavrik Catalyst platform. Third-party services we integrate with are governed by their own programmes.

3. How to report

Email hello@aimavrik.com with:

• A clear description of the issue and where you found it.
• Steps to reproduce it, and its potential impact.
• Any supporting detail (screenshots, requests) that helps us investigate.

4. What to expect

• We aim to acknowledge your report promptly.
• We will investigate, keep you updated, and work to fix confirmed issues.
• With your permission, we are happy to credit your contribution once resolved.

5. Safe harbour

If you make a good-faith effort to comply with this policy during your research, we will consider your actions authorised, will not pursue legal action against you, and will work with you to understand and resolve the issue quickly.

6. What we ask

• Give us reasonable time to fix an issue before disclosing it publicly.
• Do not access, modify or delete data that is not yours, and do not exfiltrate data.
• Avoid privacy violations, service disruption and degradation of user experience.
• Only test against your own accounts or with explicit permission.

7. security.txt

Our machine-readable policy is published at /.well-known/security.txt in line with RFC 9116.