Security

Our Commitment

Security is a first-class concern at Botomate. We take reasonable technical and organizational measures to protect any personal information you share with us, including encrypted transmission (HTTPS/TLS) and access controls on all internal systems.

Infrastructure

This site is served over Cloudflare's global network, which provides DDoS mitigation, TLS encryption, and additional security hardening at the edge. Email data is handled by Mailchimp, which maintains its own SOC 2 Type II compliance program.

Responsible Disclosure

If you believe you have found a security vulnerability in any Botomate system, we ask that you disclose it to us responsibly before making it public. Please email a description of the issue, steps to reproduce, and any relevant proof-of-concept to security@botomate.com.

We commit to acknowledging your report within 72 hours and working in good faith to resolve confirmed issues promptly. We will not take legal action against researchers who follow this policy.

Scope

In-scope assets include botomate.com and any subdomains. Out of scope: social media accounts, third-party services (Mailchimp, Google Analytics, Cloudflare), and physical infrastructure.

No Bug Bounty (Yet)

We do not currently operate a paid bug bounty program, but we genuinely appreciate responsible disclosures and will acknowledge your contribution.

Contact

security@botomate.com  ·  PO Box 684305, Austin, Texas 78768