Security & Responsible Disclosure

Document ID: FV-SRD-001
Version: 1.0
Effective Date: July 2026
Last Updated: July 2026

Security & Responsible Disclosure

At FinBillion Ventures, we are committed to developing software that is secure, reliable, and trustworthy.

While we make every reasonable effort to design, develop, and maintain secure products, no software system can guarantee absolute security. We appreciate the efforts of security researchers, developers, customers, and members of the community who help us identify potential security issues responsibly.

Our Commitment

If a legitimate security vulnerability is reported to us, we will:

• Acknowledge receipt of the report.

• Review the information in a timely manner.

• Investigate the reported issue.

• Take appropriate corrective action where necessary.

• Keep the reporter informed where practical and appropriate.

Our objective is to improve the security of our products while protecting our users.

Responsible Disclosure

If you discover a potential security vulnerability affecting a FinBillion Ventures product or service, we request that you:

• Report the issue privately.

• Provide sufficient technical information to reproduce or understand the issue.

• Allow us reasonable time to investigate and address the problem before publicly disclosing it.

• Avoid actions that could unnecessarily expose user information or disrupt our services.

Responsible disclosure helps protect users while allowing vulnerabilities to be addressed safely.

Information to Include

To assist our investigation, please include where possible:

• Product name and version.

• Device and operating system details.

• Steps required to reproduce the issue.

• Expected behaviour.

• Actual behaviour.

• Screenshots, logs, or technical evidence where appropriate.

• Your contact information for follow-up questions.

What to Avoid

When investigating security issues, please do not:

• Access information belonging to other users without authorisation.

• Modify or delete data that is not your own.

• Disrupt, damage, or impair the availability of our services.

• Attempt social engineering, phishing, or physical attacks.

• Introduce malicious software or exploit vulnerabilities beyond what is reasonably necessary to demonstrate the issue.

We ask that all testing be conducted responsibly and lawfully.

Scope

This policy applies to software applications, websites, online services, and other digital products developed and operated by FinBillion Ventures.

Individual products may publish additional security guidance where appropriate.

No Guaranteed Rewards

At present, FinBillion Ventures does not operate a public bug bounty or financial reward programme.

However, we sincerely appreciate responsible security reports and recognise the valuable contribution of the security community in helping us improve our products.

Should a bug bounty programme be introduced in the future, this page will be updated with the relevant details.

Contact

Please report suspected security vulnerabilities to:

Email: support@finbillion.com

Please include "Security Report" in the subject line to help us prioritise your message.

As FinBillion Ventures grows, a dedicated security contact address may be introduced.

Privacy

Any personal information submitted as part of a security report will be handled in accordance with the applicable Privacy Policy and used only for investigating and responding to the reported issue.

Changes to This Policy

This Security & Responsible Disclosure Policy may be updated from time to time to reflect improvements in our security practices or organisational processes.

Updated versions will include a revised Version number and Effective Date.

Our Security Philosophy

Security is not a single feature—it is an ongoing process of thoughtful design, responsible development, continuous improvement, and collaboration with our users and the wider security community.

We thank everyone who helps us strengthen the security of FinBillion Ventures products through responsible and ethical disclosure.