How to report.
Email hello@tapyoka.com with "Security" in the subject line. Tell us what you found, the steps to see it again, the address or account involved and what someone could do with it.
- We reply within 3 working days to say we have your report.
- We tell you what we plan to do and keep you updated until it is fixed.
- If you want, we thank you by name once the fix is live.
While you test.
- Use only accounts and pages you own, or test accounts you made for this.
- Do not look at, change, keep or share other people's data. If you reach some by accident, stop, and tell us what you saw.
- Do not run tests that slow down or break Tapyoka for others, such as flooding, spam or automated scans at high speed.
- Do not send messages, codes or emails to people who did not agree to it, and do not try to trick our team or our sellers.
- Do not make real payments you plan to dispute, and do not test on payment pages you do not own.
- Give us a fair time to fix the problem before you tell anyone else about it.
Our promise.
- If you follow these rules in good faith, we will not take legal action against you or ask anyone else to.
- We do not pay rewards for reports at the moment.
- Problems with a seller, a page or a payment are not security reports. Use Report a page or the grievance officer for those.
- Our contact details are also in security.txt.