Report a vulnerability
For security researchers and anyone with a suspected vulnerability. Acknowledged within 48 hours; assessed within 7 days; public credit (with permission) on resolution.
security@giesen.comTrust Center
Security & privacy contacts
We welcome contact about security, privacy, and compliance from customers, partners, researchers, and the wider community.
Privacy questions & data requests
For data subject requests (access, rectification, erasure, portability) and privacy questions. Responded to within 30 days. You can also export or delete your account directly in app settings.
privacy@giesen.comSecurity questionnaires & enterprise procurement
For RFPs and procurement security questionnaires. We can share our internal gap analysis, sub-processor list, and audit evidence under mutual NDA.
trust@giesen.comResponsible disclosure
We do not currently operate a paid bug bounty. We may offer modest tokens of appreciation for high-impact findings on a discretionary basis. We ask researchers to:
- Provide a description of the vulnerability with steps to reproduce
- Do not access or modify data belonging to others
- Do not degrade the service for other users
- Give us reasonable time to remediate before public disclosure (typically 90 days)
- We will not pursue legal action against good-faith researchers operating within these terms
