1. Purpose

LEYLA GREENHILL LLC (the "Company") values the work of security researchers and the community in helping make the LaunchExpert.ai service (the "Service") safer. This policy describes how to report a vulnerability you have found.

2. Scope

In scope: the launchexpert.ai website and platform, along with related components under our direct control.

Out of scope: the infrastructure and services of our providers — Google Cloud Platform, OpenAI, Whop, Telegram, and other third parties. Vulnerabilities in their products should be reported directly to the relevant provider.

3. How to report a vulnerability

Send your report to: legal@greenhillmediagroup.com

To help us investigate quickly, please include where possible:

• a description of the vulnerability and its potential impact;
• steps to reproduce (proof of concept);
• the affected URLs/components;
• your contact details for follow-up.

4. Our commitments

• We will acknowledge receipt of your report within 72 hours.
• We will then analyze and prioritize remediation based on the severity of the issue.
• Where necessary, we will keep in touch with you as the work progresses.

5. Guidelines for researchers

When conducting security research, we ask you to:

• act in good faith and avoid violating the privacy of other users;
• not access, modify, or delete data that does not belong to you beyond what is necessary to demonstrate the vulnerability;
• not disrupt the operation of the Service (no DoS/DDoS, spam, or destructive actions);
• not exfiltrate or disclose other people's data;
• give us a reasonable amount of time to remediate the issue before any public disclosure.

6. Reward program and safe harbor

The Company currently does not offer monetary rewards (a bug bounty) and does not provide a formal safe harbor.

7. Disclosure timing

We ask you to refrain from publicly disclosing details of a vulnerability until it has been remediated and the timing has been agreed with us.

8. Contact

LEYLA GREENHILL LLC · 5900 Balcones Drive #18555, Austin, TX 78731, USA · legal@greenhillmediagroup.com