Responsible disclosure & security

We take the security of Koppel and the data of the merchants who use it seriously. If you believe you have found a security vulnerability, we appreciate your help in disclosing it to us responsibly.

How to report

Email [email protected] with a description of the issue, the steps to reproduce it, and (if possible) a proof of concept. Please give us a reasonable amount of time to investigate and fix the issue before any public disclosure.

Our commitment

• We will acknowledge your report within 5 business days.
• We will keep you informed of our progress toward a fix.
• We will not take legal action against researchers who act in good faith and follow this policy.

Please do not

• Access, modify, or delete data that does not belong to you.
• Run automated scans that degrade or disrupt the service.
• Publicly disclose the issue before we have resolved it.

Responsible disclosure (Nederlands)

Denk je een kwetsbaarheid in Koppel te hebben gevonden? Mail dan naar [email protected] met een omschrijving en reproductiestappen. Geef ons de tijd om het probleem te onderzoeken en op te lossen voordat je het openbaar maakt. We reageren binnen 5 werkdagen en ondernemen geen juridische stappen tegen onderzoekers die zich aan dit beleid houden.

Koppel is built by BTNG B.V. — it is an independent app and is not affiliated with or endorsed by Bol.