Security practices
- Minimal data collection for the public website.
- Non-essential storage disabled until a visitor opts in.
- Static legal and company pages designed to reduce runtime attack surface.
- Separation between public website content and production infrastructure.
Vulnerability reporting
If you believe you found a security issue, email contact@openinteraction.com with enough detail for us to reproduce and validate the issue. Please include affected URLs, steps to reproduce, impact, and any relevant screenshots or logs.
Responsible testing
Good-faith security research should avoid privacy violations, service disruption, destructive testing, social engineering, spam, phishing, physical attacks, and access to data that is not your own. Do not exfiltrate, alter, or destroy data.
No bounty commitment
Unless a separate written program says otherwise, Open Interaction does not currently offer a public bug bounty or guarantee compensation for reports.
Security updates
We may update this page as our systems, policies, and product surfaces evolve.