Responsible Disclosure

At GoodUp, we care deeply about security and privacy. We do our utmost to keep our platform safe for everyone. Still, no system is ever perfect — if you discover a vulnerability in our platform, we appreciate your help in reporting it responsibly.

How to report a vulnerability

If you’ve found a potential security issue, please email us at info@goodup.com. Include:

• A clear description of the vulnerability
• Steps to reproduce it
• Any potential impact you foresee

Please don’t publish the issue publicly before we’ve had a chance to investigate and resolve it. We aim to respond within 5 business days and will keep you updated throughout the process.

What we ask from you

• Do not abuse or exploit the vulnerability
• Do not access or modify data that isn’t yours
• Do not degrade our service or harm other users
• Give us a reasonable time to fix the issue before disclosure

What you can expect from us

• A timely response and regular updates
• An honest and fair evaluation of your report
• Fixes where needed, prioritised by risk
• Our sincere thanks for helping us improve the security of GoodUp

Let’s make the web a better place — together.