Security Policy

This policy covers the websites and products Adamanture Private Limited runs, including adamanture.com, unlikemail.com, the Unlike Mail apps for Windows and Android, and the account service those apps use. A weakness that exposes someone's data, bypasses authentication or encryption, or lets one account act on another is in scope.

Email security@adamanture.com. The same contact is published in machine-readable form in security.txt. Reports in English are easiest for us to act on.

Please keep the details between us until the issue is fixed, and give us a reasonable window to do that before you publish.

The address of the page or the name and version of the app, what you found, the steps to reproduce it, and the impact you believe it has. A proof of concept helps. Use accounts of your own, and do not send us mail content, passwords or keys that belong to anyone else.

We will acknowledge your report, tell you whether we accept it as a vulnerability, keep you informed while we fix it, and tell you when it is fixed. If you want credit, we will name you when we publish the fix. If you prefer not to be named, we will not name you.

Adamanture does not run a bug bounty programme and does not pay for reports.

If you act in good faith and stay within this policy, we will not take legal action against you. Test only what you need to show the issue. If you come across personal data, stop, do not keep a copy, and tell us. Do not change or delete data, and do not degrade the service for others.

• Denial of serviceFlooding, load testing or anything that exhausts our resources
• Social engineeringPhishing or deceiving our staff, our users or our providers
• Physical attacksAgainst our offices, devices or people
• SpamSending bulk or unwanted messages through our services
• Scanner outputAutomated results without a demonstrated issue
• Other people's dataReading, changing or keeping data or accounts that are not yours
• Other companies' systemsGoogle, Microsoft, Zoho and other providers: report to them