1. Scope
This policy covers lakelinedata.com and its subdomains operated by Lakeline Data Private Limited. Third-party services we use (for example our hosting, email and analytics providers) have their own disclosure programmes; please report issues in them to the provider.
2. How to report
Email [email protected] with the subject "Security report". Include:
- the affected URL or component;
- a description of the issue and its likely impact;
- clear steps to reproduce it, with any proof-of-concept;
- how we can reach you.
Please do not share the issue with anyone else until we have fixed it.
3. What is and is not allowed
Allowed: testing with your own requests at a reasonable rate, and accessing only the minimum data needed to demonstrate an issue.
Not allowed:
- denial-of-service, load or stress testing;
- social engineering, phishing or physical attacks on our staff or offices;
- accessing, changing or deleting data that is not yours, or keeping any data you come across;
- automated scanning that generates heavy traffic;
- attempts on the admin area beyond confirming that an issue exists.
4. Our commitments
- We acknowledge your report within 2 working days.
- We keep you informed while we investigate and fix it.
- We will not pursue legal action against good-faith research that follows this policy.
- With your permission, we credit you once the issue is fixed.
We do not currently run a paid bug bounty.