Security
Last updated:
Report a security concern privately and understand the boundaries of the current platform.
Report an issue
Email support@induspoint.in with the affected URL, a concise description and safe reproduction steps. Do not send passwords, tokens, private verification files or another person’s contact data. The same contact is published in /.well-known/security.txt.
Access controls
Seller workspaces require authentication and ownership. Administrator review requires platform administrator membership. PostgreSQL row-level security and server-side authorization restrict access. Private verification documents use private storage and expiring access links; service-role credentials are used only on the server for privileged operations.
Public data boundary
Real listings require publication review and consent. Demo content is clearly synthetic and cannot receive commercial enquiries. Private evidence is not sent to Claude or placed in public structured data. Publication review does not guarantee a business or product is risk-free.
Disclosure and response
Avoid accessing other people’s information, disrupting availability or testing spam and payment effects. We assess reports and may request more detail. We do not promise a response deadline, bounty payment, security certification or immunity beyond any applicable law.
Current limitations
AI rate limits are per server instance. Account and enquiry records have no automatic retention schedule or self-service deletion. Support handles privacy requests after identity confirmation. Security controls reduce risk; they are not a certification or a guarantee.