This English version is provided for convenience. If there is any discrepancy, the Spanish version prevails.
Protecting your information is central to Datecito. If you are a security researcher and found a vulnerability, we want to know.
1. How we protect Datecito
- TLS encryption on all communications.
- Session tokens stored in the device’s secure storage.
- Rate limits and automation detection.
- Code review and dependency scanning.
- Least-privilege principle for internal access.
2. How to report a vulnerability
Send your report to seguridad@datecito.com with a description, steps to reproduce, potential impact and your contact details.
- Do not access, modify or delete other users’ data.
- Do not perform denial-of-service tests, social engineering or physical attacks.
- Only use test accounts you own.
- Give us a reasonable period (90 days) to fix it before public disclosure.
3. Our commitment
We will acknowledge receipt within 3 business days, keep you posted and, if you acted in good faith under this policy, we will not take legal action against you. If you wish, we will credit you publicly.
4. Scope
- Datecito app for Android and iOS.
- Datecito API.
- datecito.com and subdomains.
Text highlighted [like this] is pending information. This document is a draft subject to legal review.