Responsible Disclosure Policy

Operator: MYCLOUDWISH TECHNOLOGIES PRIVATE LIMITED (SocietyCart)
Effective date: 31 October 2026
Registered office: Gurgaon, Haryana, India
Support: info@societycart.in
Version: 1.0

This policy applies to SocietyCart's customer app, shopkeeper interfaces and website insofar as relevant. It must be read with the Terms and Conditions and mandatory Indian law. If a provision conflicts with mandatory law, the law prevails.

1. Scope

Good-faith researchers may report security vulnerabilities in SocietyCart-controlled apps, APIs and websites.

2. Safe testing

Do not access other users’ data, disrupt service, run denial-of-service attacks, exfiltrate information or conduct social engineering.

3. Reporting

Send a detailed report, affected URL, reproducible steps and impact to info@societycart.in. Do not publicly disclose sensitive details before coordinated remediation.

4. Acknowledgment

SocietyCart aims to acknowledge reports within 7 business days and provide reasonable progress updates; exact service levels require operational approval.

5. Researcher treatment

Good-faith conduct within this policy will be considered favorably, but this policy cannot authorize violations of law or third-party rights.

6. Recognition

Public recognition or rewards, if any, require explicit approval and are not guaranteed.

Contact and review

For questions contact SocietyCart Customer Support.