Responsible Disclosure Program
Help us strengthen Sebleu’s digital security. Learn how to responsibly report vulnerabilities and what to expect during the process.
Last updated: 3 June 2025
Thank you for your interest in helping us improve the security of Sebleu’s systems and platforms. We take the security of our technologies, services, and user data seriously, and we appreciate your effort to responsibly disclose any vulnerabilities you may discover.
By submitting a vulnerability report to us, you agree to the following Terms of Use, which are intended to protect both you and Sebleu.
1. Safe Harbor
if you submit a security vulnerability report in good faith and in compliance with all provisions of these Terms of Use, Sebleu will: ResponsibleDisclosure@sebleu.com
- Not pursue civil or criminal action against you.
- Not report your actions to law enforcement, provided your access was solely to identify the vulnerability and was limited in scope.
This Safe Harbor applies only if your activities are conducted responsibly, lawfully, and in accordance with these guidelines.
2. Submission Process
All vulnerability reports should be submitted via email to:
ResponsibleDisclosure@sebleu.com
Your report should include, where possible:
- (a) A clear description of the vulnerability
- (b) The affected domain, URL, IP address, or endpoint
- (c) Step-by-step instructions to reproduce the issue (including logs, screenshots, responses, or proof-of-concept code)
- (d) Details of how the issue was discovered
- (e) The potential or presumed impact
- (f) Any suggested remediation or mitigation
- (g) Your name and preferred contact information (optional)
Please do not include any sensitive personal data in your initial message.
3. Scope
You may not attempt to access or interfere with:
- Any user, customer, or third-party data
- Systems, applications, networks, or infrastructure not owned or operated by Sebleu
- Any third-party integrations not explicitly authorized under this program
Safe Harbor does not apply to activities involving systems or data outside of Sebleu’s direct control.
4. Methodology
You must not:
- Conduct denial-of-service (DoS or DDoS) attacks
- Attempt to compromise physical infrastructure or enter Sebleu premises
- Use phishing, social engineering, or impersonation techniques
- Engage in destructive or disruptive behavior during testing
Once a vulnerability is confirmed, you must cease testing and report it immediately. Violation of this section invalidates Safe Harbor protection.
5. No Access to Personal Data or Unauthorized Data Use
By submitting a report, you confirm that:
- You have not accessed, stored, or retained any personal data belonging to Sebleu’s users, clients, or partners
- If personal data was inadvertently accessed, you have immediately and securely deleted it
- You will not collect, share, publish, or misuse any data obtained during testing for any unlawful, fraudulent, or harmful purpose
Responsible Disclosure Program Clause:
Participation in this program does not authorize you to extract, copy, store, share, or otherwise use any content or data from Sebleu’s website, platforms, or infrastructure beyond what is necessary to identify a security flaw. All activity must comply with these Terms and relevant data protection laws.
6. Intellectual Property Rights
By submitting a vulnerability or related information, you grant Sebleu a perpetual, worldwide, royalty-free license to use, adapt, disclose, and apply the information for legitimate business and security purposes, including:
- Investigation and remediation
- Improvement of systems, services, or infrastructure
- Research, analysis, or internal training
This includes code samples, screenshots, logs, or written explanations. You do not acquire any rights to Sebleu’s intellectual property.
7. Sanctions and Restrictions
By participating, you confirm that:
- You are not subject to any export or trade sanctions under the laws of Singapore, the United States, or the European Union
- You are not located in, or a national of, a restricted or embargoed country
- You are not listed on any government sanctions or prohibited persons list
8. No Employment Relationship
Participation in this program does not establish an employment, agency, or partnership relationship with Sebleu. You are not authorized to speak on behalf of Sebleu or make any representations in our name.
9. Disclaimer of Liability and Compensation
Sebleu and its affiliates, directors, employees, and contractors are not liable for:
- Any damages or losses (direct or indirect) related to your participation in this program
- Any fees, expenses, or services performed unless explicitly agreed to in writing
This program is voluntary. Submitting a report does not entitle you to compensation or rewards.
10. Legal Jurisdiction and Miscellaneous
These Terms of Use are governed by the laws of the Republic of Singapore , without regard to conflict of law principles.
You may not use Sebleu’s trademarks, name, or logo without express written permission.
Sebleu reserves the right to revise, pause, or terminate this program at any time without notice.
