Security

Vulnerability Disclosure Policy

We welcome reports from anyone who believes they have found a security issue in Dexterly. Thank you for helping keep our customers safe.

How to report

Email security@dexterly.in with:

a description of the issue and where it occurs,
the steps needed to reproduce it,
the impact you believe it has, and
any suggested fix, if you have one.

Please do not include other people's personal data in your report. We will reply to confirm we have received it and keep you informed as we investigate.

Scope

In scope

www.dexterly.in and its customer-facing pages
Account sign-in, cart, checkout and order tracking
Customisation request and file upload flows
The Dexterly API used by the website

Out of scope

Denial-of-service, load or volumetric testing
Social engineering, phishing or physical attacks on staff or premises
Automated scanning that generates high traffic without prior agreement
Vulnerabilities in third-party services we use (report those to the provider)
Reports that only list missing best-practice headers without a demonstrated impact

Testing guidelines

Use only accounts and orders you own, or test data.
Do not access, change or delete other customers' data. If you reach personal data by accident, stop, do not keep it, and tell us.
Do not place real orders you do not intend to pay for, or disrupt the service.
Give us a reasonable opportunity to fix the issue before disclosing it publicly.

We do not currently run a paid bug bounty programme.

Dexterly is operated by Tyagi Enterprises, Agra, Uttar Pradesh. For anything other than security reports, please use our Support page.