Report security issues to feedback@sophoninc.com with “Security” in the subject line. The same contact is published in the RFC 9116 format at sophoninc.com/.well-known/security.txt.
In scope
- The sites: sophoninc.com, heycue.io, cueoffice.ai, ppt.sophoninc.com, myevolve.ai.
- The products listed on the products page, and the other Google Play listings named on Who operates our store listings.
What to include
- Which product or site, and the version or address.
- The steps to reproduce, and what you observed.
- The impact as you understand it.
- A way to reach you for questions.
Do not include other people's data, and do not test against accounts that are not yours.
What we do not run
There is no bug bounty programme. Reports are read at the address above; we reply from the same address.