Vulnerability Policy

We want to know about security problems in Simple Affiliate. This page tells you what to report, how to report it, and how fast we fix a problem that we confirm.

Scope

This policy covers the Simple Affiliate Shopify app, the servers that run it, and this website. Report a problem in Shopify itself to Shopify.

How to report

Send an email to support@simple-affiliate.com with "Security" in the subject. Give the affected page or feature, the steps that show the problem, and what an attacker can do with it.

• Use only your own test store and your own accounts. Do not read, change or delete the data of other merchants or their customers.
• Do not run tests that slow down or stop the service, and do not send spam or phishing messages.
• Do not publish the problem before we fix it.

What we do

We confirm the problem, give it a severity, and fix it in the time below. We tell you when the fix is live.