# Security contact for Sahayogi (Impact Tech Hub).
# We acknowledge reports within 5 working days.
# In scope: this web app and its API — especially anything that lets one account
# reach another account's listings, bills, payments, documents, or messages.
# Out of scope: denial-of-service, scanner output with no demonstrated impact,
# social engineering, and reading data that is not your own.
# No paid bounty. A human reply, a fix, and credit if you want it.

Contact: mailto:support@sahayogi.io
Expires: 2027-01-31T23:59:59Z
Preferred-Languages: en, ne
Canonical: https://sahayogi.io/.well-known/security.txt
Policy: https://sahayogi.io/security