Responsible Disclosure

At Reelist, safeguarding the security of our systems, products, and customer data is a top priority. We appreciate the efforts of security researchers and others who report vulnerabilities responsibly, and we are committed to addressing any issues promptly.

Guidelines for Responsible Disclosure

If you identify a security vulnerability related to Reelist systems, please:

1. Report it promptly: Contact us at security@reelist.com as soon as possible.
2. Include details: Provide a clear and detailed description, including:
   • The type of vulnerability.
   • Steps to reproduce the issue.
   • Any supporting evidence or proof of concept.
3. Do not exploit the vulnerability: Avoid testing on live systems, accessing or modifying data, or disrupting services.
4. Maintain confidentiality: Do not share details of the vulnerability publicly or with third parties until Reelist confirms the issue has been resolved.

Our Commitment to You

When you report a vulnerability:

• Acknowledgment: We will acknowledge your report within 3 business days.
• Transparency: We will keep you informed as we investigate and resolve the issue.
• Recognition: If desired, we will credit your responsible disclosure once the issue is fixed, subject to applicable laws.

Scope

This policy applies to Reelist-owned systems and services. It does not authorize:

• Testing against systems or services not owned by Reelist.
• Physical testing of Reelist offices, facilities, or staff.
• Use of automated scanners that may negatively impact Reelist systems.

Legal Safe Harbor

We will not take legal action against researchers who follow this policy in good faith. However, any activity that violates this policy, applicable laws, or terms of service may result in legal consequences.

Out of Scope

The following are excluded from this policy:

• Social engineering of Reelist employees or contractors.
• Denial of Service (DoS) attacks.
• Vulnerabilities in third-party services or platforms integrated with Reelist.

‍

We value your contributions to keeping Reelist secure and appreciate your adherence to this policy.

Changes

Reelist reserves the right, in its sole discretion, to change the policies under which reelist.com or related services are offered, including but not limited to the Privacy Policy and Terms of Service. The most current version of these policies will supersede all previous versions. When required by law, Reelist will notify you about significant changes to these policies by sending a notice to the primary email address specified in your account, placing a prominent notice on our Site, and/or updating any information on this page.

Your continued use of the Site and/or Services available through this Site after such modifications will constitute your: (a) acknowledgment of the modified policies; and (b) agreement to abide and be bound by those policies. Reelist encourages you to periodically review these policies to stay informed of our updates.