How do I report a security issue?

Write to legal@itogai.com. No other address handles security. itogai acknowledges receipt within five business days, investigates in good faith, tells you what it found and what it intends to do within 30 days, and credits you if you’d like. Testing itogai’s systems needs written authorization first from the same address, and a report made in good faith is never treated as a violation. itogai doesn’t run a paid bounty program. The same address takes a report that an account, a credential, or a device may be compromised, and any message asking for a password, a payment card, or a one-time code in itogai’s name.