Legal

Responsible Disclosure Policy

Found a security issue? Here’s how to report it safely — and our commitment to you.

Effective date: July 19, 2026

Company: Digibeds Technologies Private Limited (“Digibeds”, “we”, “us”), India

1. Our Commitment

Digibeds welcomes good-faith security research. If you follow this policy, we will not initiate legal action against you for your research, will work with you to understand and resolve the issue quickly, and will credit you (with your consent) once fixed.

2. How to Report

  • Email [email protected] with subject “Security Vulnerability Report”;
  • Include: affected URL/endpoint, reproduction steps, impact assessment, and any proof-of-concept — redact real personal data;
  • We acknowledge reports within 2 business days, provide a triage assessment within 7 business days, and keep you informed through remediation.

3. Rules of Engagement

  • Do not access, modify, exfiltrate or destroy data that is not your own; use test data wherever possible and stop immediately if personal data is encountered;
  • No denial-of-service, spam, social engineering, phishing or physical attacks;
  • No automated scanning at disruptive volumes against production;
  • Do not publicly disclose an issue before a fix is released and coordinated disclosure is agreed (target: within 90 days of triage).

4. In Scope / Out of Scope

  • In scope: digibeds.com websites, the Digibeds cloud application, mobile applications and the Open API (openapi.digibeds.com);
  • Out of scope: third-party services (payment gateways, OTAs, hosting), findings requiring physical access or stolen credentials, clickjacking on non-sensitive pages, missing best-practice headers without demonstrated impact, and reports from automated tools without validation.

5. Safe Harbour

Research conducted in good faith and in accordance with this policy is considered authorised under applicable anti-hacking and anti-circumvention laws to the extent we can authorise it, and we will not pursue or support legal action for accidental, good-faith violations of this policy.

Contact

Questions about this document: email [email protected] or call 08040265786. This document is part of the Digibeds legal framework — see the Legal Center for all policies.