Security

Reporting a security issue

If you have found a security vulnerability in Voiceora, please tell us at security@voiceora.io. We will acknowledge your report within 2 working days.

Please do not publicly disclose the issue until we have had a reasonable opportunity to fix it.

Our commitment to researchers

We will not pursue legal action against anyone who reports a vulnerability in good faith, provided you:

• avoid privacy violations, and do not access, modify or delete data belonging to other users;
• avoid degrading or disrupting the service for others;
• give us reasonable time to respond before disclosing publicly.

We do not currently run a paid bounty programme. We are grateful regardless, and will credit you publicly if you would like us to.

What is in scope

The Voiceora web application and API at voiceora.io, and the Voiceora iOS application.

Reports about our third-party providers should go to those providers directly. Our current list is at /subprocessors.

Contact

security@voiceora.io

GravitonForge Technologies Ltd, 12 Primrose Gardens, Auckley, Doncaster, England, DN9 3RR