Security and Responsible Disclosure

Last updated: October 9, 2026

How we protect data

Connections use HTTPS. Files are stored in private cloud storage and are served through short-lived signed links. Access rules restrict each account to its own files. No service is perfectly secure, so avoid sharing highly confidential files through public links.

Report a vulnerability

Email tanyora@support.com with steps to reproduce. Please give us reasonable time to fix the issue before public disclosure, do not access other users' data, and do not disrupt the service. We do not currently run a paid bug bounty.