Company
Security
Found a security problem in out-of-office? Tell us first, and we will fix it.
Report a problem
Write to security@out-of-office.tech. Say what you found, the steps to repeat it and the page or call it touches. We answer within 3 working days. Our contact file is at /.well-known/security.txt.
Rules for a report
- Test only your own account and your own data.
- Do not read, change or delete the data of another user.
- Do not run a denial-of-service or spam test, and do not attack the judge with heavy code.
- Give us a fair time to fix the problem before you tell anyone.
We will not take legal action against a good-faith report that follows these rules.
How we protect your data
- All traffic uses HTTPS.
- You sign in with Google, GitHub or an email link, so we store no password.
- Your code runs in a sandbox apart from the data of other users.
- We never see your card number; our payment provider holds it.