Consultwise LLC · Legal information

Security & Responsible Disclosure

How the service protects key credentials and how to report a suspected vulnerability.

Effective date: 2026-09-16

1. Current safeguards

S4-Social Loop uses account authentication and role-based workspace access. Account passwords are stored as hashes, and locally stored social-platform credentials are encrypted by the application. Session cookies are HTTP-only and use a SameSite setting. Operational logging and access controls support troubleshooting and accountability.

These measures reduce risk but do not guarantee that every record, transmission, provider, or online service is invulnerable. Public media URLs are intentionally accessible for previews and social publishing and must not be treated as confidential storage.

2. Report a vulnerability

Email [email protected] with the subject “S4-Social Loop security report.” Include the affected URL or feature, a concise reproduction description, impact, and safe supporting evidence. Do not include real customer data unless specifically requested through an appropriate secure method.

3. Testing boundaries

This page does not authorize security testing. Do not access another user's data, degrade availability, use destructive payloads, perform social engineering, publish secrets, or test providers and infrastructure owned by others. Ask for written authorization before testing.

4. Incident communications

If a security incident occurs, Consultwise LLC will evaluate the facts and provide notices required by applicable law and contracts. This page does not promise a particular outcome, bounty, response time, or notification deadline.