Reporting a security issue

How to report. Email privacy@bartendersnow.com with "Security" at the start of the subject line. Please include:

• what you found and where (the page, URL or endpoint);
• the steps to reproduce it;
• what you believe someone could do with it; and
• how to reach you if we have questions.

Please include only as much personal information, about yourself or anyone else, as you need to show the issue. We handle what you send us as described in our Privacy Policy.

While you look, please:

• test only with your own account, or with accounts you have permission to use;
• do not access, change or delete information that is not yours. If you come across someone else's information, stop, do not keep a copy, and tell us what kind of information it was and where you found it, without sending us the information itself;
• do not disrupt the service: no denial-of-service, load testing or high-volume automated scanning;
• do not contact, message or send booking requests to other users, and do not attempt real payments, payouts or refunds with cards or accounts that are not yours;
• do not use social engineering, phishing or physical access against our users, our people or our vendors; and
• give us a reasonable opportunity to fix the issue before you share it publicly.

Third-party services. Issues in services we use (for example Google Cloud/Firebase, Stripe, Vercel, SendGrid or Twilio) should go to that provider under its own program. If the issue affects how bartendersNow™ uses the service, please tell us too.

What to expect. We review the reports sent to this address. We are a small company, so we cannot promise a specific response time, and we do not currently offer payment or a bug bounty for reports.

This page explains how to report an issue to us. It does not change our Terms of Service and does not give permission to access any account, data or system you are not otherwise allowed to use.