Security Policy

Boo Private Ltd takes security seriously. We appreciate responsible disclosure of vulnerabilities.

Reporting a Vulnerability

If you discover a security vulnerability, please email us at security@booempire.in

• We will acknowledge receipt within 24 hours
• We will investigate and respond within 72 hours
• We will fix confirmed vulnerabilities within 7 days
• We will credit you publicly (if you wish) after the fix

Scope

• All apps under booempire.in and associated domains
• Authentication and authorization flaws
• Data exposure vulnerabilities
• Injection vulnerabilities

Out of Scope

• Social engineering attacks
• Physical security
• Denial of service attacks
• Spam or phishing

Legal

We will not take legal action against security researchers who act in good faith and follow this policy.