Security and Responsible Disclosure
- Current operator:
- Retractability Bicycles LLC
- Principal location:
- Glendale, Arizona, United States
- Contact:
- support@splittai.app
- Effective date:
- October 22, 2026
- Last updated:
- October 22, 2026
We welcome good-faith reports that help us improve Splitt’s security.
Reporting a potential issue
Email support@splittai.app with the subject line “Splitt Security Report.”
Include:
- a clear description of the issue;
- the affected page, feature, or endpoint;
- steps to reproduce;
- the potential impact;
- any evidence needed to understand the issue;
- your contact information;
- whether you believe user information may have been accessed.
Do not include passwords, private keys, access tokens, or unnecessary user data.
Rules for good-faith research
Do not:
- access, copy, change, or delete another user’s information;
- attempt to access another company’s workspace;
- disrupt the Service;
- perform denial-of-service testing;
- use social engineering, phishing, or physical attacks;
- deploy malware;
- test third-party providers without their authorization;
- publicly disclose an unresolved issue before we have had a reasonable opportunity to investigate;
- retain data obtained during testing.
Stop testing and notify us immediately if you encounter personal information, private business information, credentials, or documents that do not belong to you.
What we will do
We will review reports and may ask for additional information.
We do not promise a bounty, payment, public recognition, or a particular response timeline.
This notice does not provide a legal safe harbor.
Scope
Unless we approve otherwise in writing, testing is limited to Splitt-owned public applications and accounts you control.
Do not test customer systems, provider infrastructure, or unrelated domains.
Splitt is a product operated by Retractability Bicycles LLC.
Contact support@splittai.app. For privacy requests, use the subject “Splitt Privacy Request”. Do not send passwords or authentication tokens.