Security Disclosure

1. What is covered

• ezflowlabz.com and its pages.
• The booking pages and the business dashboard at app.ezflowlabz.com.
• The phone lines and text messages we run for businesses that use the Service.

Systems run by other companies, such as our messaging, payment, hosting and calendar providers, are not covered. Please report problems in those systems to the company that runs them.

2. How to report

Email hello@ezflowlabz.com with the subject "Security report". Please include:

• What the problem is and where you found it (the page address or the phone line).
• The steps to reproduce it.
• What someone could do with it.
• How to reach you if we have questions.

Do not send passwords, card numbers or other people's personal information in the email. Tell us that you saw such data and we will arrange a safe way to share the details.

3. Ground rules

• Test only with accounts, phone numbers and bookings that are your own.
• Do not open, change, copy or delete data that belongs to someone else. If you come across such data, stop and tell us.
• Do not send texts or place calls to people who have not agreed to take part in your test.
• Do not run tests that slow down or interrupt the Service, such as denial-of-service or high-volume automated scans.
• Do not use social engineering against our team, the businesses that use the Service or their customers.
• Give us a reasonable time to fix the problem before you share it with anyone else.

4. What you can expect from us

• We read every report and aim to reply to tell you we have it.
• We aim to tell you whether we could confirm the problem and when it is fixed.
• We will not start legal action against you for research that is done in good faith and follows the ground rules above. This promise covers only our own systems. It does not cover systems run by other companies, and it does not apply to anything outside those rules.

We do not run a paid bug bounty program.

5. How we protect the Service

We use reasonable technical and organizational measures to protect the information we hold, such as encryption in transit and limited access. Payment card details are collected and held by our payment processor, and we do not store full card numbers. How we handle personal information is explained in our Privacy Policy.

6. Changes to this page

We may update this page. When we do, we change the version and the "Last updated" date at the top.

7. Contact us