Security at Voyj

1. Report a security issue

Voyj Workbench is operated by Nian Marketing Pty Ltd. We take the security of our systems and the information entrusted to us seriously.

If you believe you have found a security vulnerability in Voyj Workbench or a Voyj-operated website, email security@voyj.app.

Please include:

• a clear description of the issue and its potential impact;
• the affected URL, feature, or system;
• steps to reproduce the issue;
• proof of concept material only where needed to demonstrate the issue safely; and
• your preferred contact details, if you would like a response.

Do not include personal information, passwords, access tokens, or other secrets unless it is strictly necessary. If sensitive material must be shared, tell us in your initial report and we will arrange a safer channel.

2. Our response

We aim to acknowledge reports within five business days and will investigate credible reports promptly. We may ask for further details, keep you informed where practical, and notify you when the issue has been resolved or a mitigation is in place.

We do not offer a bug bounty at this time.

3. Responsible disclosure

We ask security researchers to act in good faith and avoid actions that could harm our users, customers, systems, or data. In particular, please do not:

• access, alter, download, or delete data that does not belong to you;
• attempt to obtain account credentials, tokens, payment details, or other secrets;
• disrupt, degrade, or deny service to Voyj systems or users;
• use automated scanning or high-volume testing that may affect availability;
• use social engineering, phishing, physical attacks, or denial-of-service techniques; or
• publicly disclose a vulnerability before we have had a reasonable opportunity to investigate and address it.

If you follow these guidelines, we will not pursue legal action against you for good-faith security research conducted solely to identify and report a vulnerability. This does not authorise testing of third-party services, customer systems, or any activity that violates applicable law.

4. Security contact

Security reports: security@voyj.app

Privacy requests: privacy@voyj.app

General support: support@voyj.app

Machine-readable security contact information is available at voyj.app/.well-known/security.txt.