Security
If you think you have found a security problem in Onzli, in this website, the help centre or the Onzli application, please tell us. We read every report.
How to report a problem
Email security@onzli.com. Please include:
- What you found and where: the page, address or feature.
- The steps that show the problem, and what you expected to happen instead.
- What an attacker could do with it, as far as you know.
- How we can reach you, if you would like a reply.
Do not put other people’s personal or tax data in your report. If you need to show us some, describe it instead.
What we do with your report
We will acknowledge your report, look into it, and tell you what we found and what we are doing about it. If a problem has affected customers’ data, we follow our incident process, which includes telling the people affected and the authorities we are required to tell.
What we ask of you
- Use only accounts and data that are your own, or test accounts you created.
- Do not read, change or delete other people's data. If you reach any by accident, stop, do not keep it, and tell us.
- Do not degrade the service for others: no denial-of-service, load or spam testing.
- Do not use social engineering or physical attacks against our staff or premises.
- Give us a reasonable time to fix the problem before you tell anyone else about it.
If you act in good faith and within these limits, we will not take action against you for your research.
Machine-readable contact
The same contact is published at security.txt (RFC 9116).
Other questions
For help with the service, email support@onzli.com. For questions about personal data, email privacy@onzli.com.