BAQQER takes the security of its website and customer information seriously. If you believe you have found a security vulnerability affecting baqqer.com or a BAQQER service, please report it responsibly so we can investigate and address it.

How to Report

Email security reports to [insert confirmed security-report email address] with the subject line “Security Vulnerability Report.” Include the affected URL or feature, a description of the issue, steps to reproduce it, the potential impact, relevant logs or screenshots that do not contain unnecessary personal information, and your preferred contact information.

Do not include payment-card numbers, passwords, private customer data, or other sensitive information in your report. If sensitive data is involved, state that fact without transmitting the data unless BAQQER gives you a secure submission method.

Responsible Testing

Do not access, copy, modify, delete, or disclose data belonging to other users. Do not interrupt service, use social engineering, send spam, deploy malware, conduct denial-of-service testing, or continue testing after you confirm that customer data or production systems may be affected.

Limit testing to accounts, systems, and data that you own or are authorized to test. Stop promptly if you encounter personal information or credentials and report the discovery without further access.

Response

BAQQER will try to acknowledge a report within five business days and may request additional information. We will assess the report and determine an appropriate response based on severity, exploitability, affected systems, and applicable law. We do not promise a particular response time, reward, public acknowledgement, or remediation outcome unless BAQQER expressly confirms one in writing.

Scope Confirmation Required

Before publication, BAQQER must confirm the security-report email address, in-scope domains and systems, disclosure policy, safe-harbor position, and whether a bug-bounty or rewards program exists.