Legal
Security policy
If you find a way to break Dripost, we would rather hear it from you than learn it another way.
Last updated 2026-09-21.
The short version
- Email rajesh@dripost.com with "security" in the subject and how to reproduce it.
- Test only with your own account and data, and do not degrade the service for anyone else.
- Give us reasonable time to fix it before you publish.
- We do not pay bounties. We will credit you once it is fixed, if you would like that.
Reporting a problem
Email rajesh@dripost.com with "security" in the subject. Say what you found, where, and how to reproduce it. We will acknowledge it and keep you informed.
What we ask
- Give us reasonable time to fix a problem before you publish it.
- Test only with your own account and data. Do not access, change or delete anyone else's.
- Do not run tests that degrade the service for others.
What we do not offer
We do not run a paid bounty programme. We will credit you if you would like that, once the problem is fixed.
What is in place
See the security page for what protects connected accounts today, and what is not built yet.
Questions about this page? Write to us.