Scope
This policy covers checkmateapp.ai, app.checkmateapp.ai and api.checkmateapp.ai.
Reporting
Email security@checkmateapp.ai with a description of the issue, the steps to reproduce it, and the impact you observed. We will acknowledge your report within 5 business days and keep you informed as we work on it.
Safe harbour
Security research carried out in good faith and in line with this policy is authorised. We will not pursue legal action against, or report to law enforcement, anyone who follows it.
Rules
Use only accounts you own or have permission to use. Access no more data than you need to demonstrate the issue, and do not modify or delete data. No denial-of-service, no social engineering, and no physical testing. No automated scanning that degrades the service. Please give us 90 days to fix an issue before disclosing it publicly.
No bug bounty
We do not currently offer payment for reports. We are happy to credit you if you wish.