IndexSecurity policy

Security policy

Version
1.0
Effective date
27 October 2026

Check them with Verify, in the footer of every page. Two rules never change:

  • We only email from @partyactionpeople.com.
  • We never DM first about money.

If someone fails Verify, or asks you to pay, sign or share anything over chat, treat them as an impersonator. Report them to security@partyactionpeople.com, with screenshots and the handle, email, number or LinkedIn profile they used.

Email security@partyactionpeople.com. Include what you found, where, how to reproduce it, and what an attacker could do with it. We'll acknowledge your report within 3 business days and keep you updated until it's fixed.

In scope: partyactionpeople.com and its Verify API.

Please don't:

  • test with denial of service, or with high volumes of traffic;
  • try to discover or list our staff's handles, emails or numbers through Verify. A few test checks with your own made-up values are fine.
  • social-engineer, phish or contact our staff, sponsors or attendees;
  • access, change or keep data that isn't yours;
  • disclose the issue publicly before we've fixed it.

Safe harbour: If you act in good faith and follow this policy, we won't take legal action against you over your research.

Rewards: We don't run a paid bug bounty. If you'd like, we'll thank you by name once the issue is fixed.