How we protect your account and your data, and how to tell us if you find a hole in it.
Your account
Passwords are stored hashed, never in plain text. Card details go straight to our payment processor and never reach our servers.
Our infrastructure
Traffic is served over HTTPS. Access to production is limited to the people who need it, and it's logged.
If something goes wrong
If a breach affects your personal data we will notify you and the Data Protection Board of India, as the DPDP Act requires.
Reporting a vulnerability
Found a security problem? Email admin@edbuddypro.com with enough detail to reproduce it. Give us reasonable time to fix it before going public, and don't access or change anyone else's data while testing. We won't pursue researchers who follow that.
What a good report contains
The URL or screen, what you did, what happened, and what you expected instead. A screenshot or a short recording helps. If it involves data that isn't yours, stop at the point you can prove the issue. Don't go further to see how much you can reach.
Still not clear?
Write to admin@edbuddypro.com and a person will answer: Monday to Saturday, 10am to 7pm IST.