Security and reporting
Help us investigate security problems, harmful content and abuse without spreading private information.
Report a vulnerability
Use the contact form and begin your message with “Security report”. Include the affected public URL or feature, steps to reproduce, expected and actual behavior, and a brief explanation of the impact. Use a test account you control and redact personal data, tokens and credentials.
Please stop if testing exposes someone else’s information. Do not download or alter it, interrupt the service, access other accounts or publish exploit details before we have had a reasonable opportunity to investigate. Ask through the contact form for a suitable way to share sensitive evidence. We do not currently promise a bounty, a fixed response time or legal safe harbor.
Report abuse or harmful content
Use an in-app reporting control where available, or contact us with “Abuse report”, the relevant conversation, public link or account identifier, a description and the approximate time. Do not send illegal imagery or unnecessary copies of private conversations. See our Acceptable use policy. If you disagree with a restriction, contact us to request review.
Protect your account
Use secure sign-in methods, review connected permissions and disconnect unused tools. Never share passwords, sign-in codes or API keys in a support message. Review AI-generated instructions before running them and supervise actions that change data, send communications or spend money.
Security statements
Permissions and security controls reduce risk; they cannot eliminate it. This page is not a claim of a security certification, independent audit, end-to-end encryption or provider verification. For information about data handling and deletion, read the Privacy notice and deletion instructions.
Questions about this page? Contact the team.