01How to report

Email support@usagazebos.com with “Security” in the subject line. Please include:

• A description of the issue and its potential impact.
• The page, URL or parameter affected.
• Step-by-step instructions to reproduce it, and a proof of concept if available.
• Your name or handle, if you would like to be credited.

02Guidelines for researchers

• Give us a reasonable amount of time to fix the issue before disclosing it publicly.
• Do not access, modify or delete data that does not belong to you.
• Do not run tests that degrade the site for customers, including denial-of-service or high-volume automated scanning.
• Do not use social engineering, phishing or physical attacks against our staff or partners.
• If you encounter customer data, stop, do not keep it, and report it to us immediately.

We will not pursue legal action against anyone who reports a vulnerability to us in good faith and follows these guidelines.

03What you can expect from us

• Acknowledgement of your report within 2 business days.
• An initial assessment within 10 business days.
• Updates on our progress until the issue is resolved.
• Credit for your discovery once the fix is live, if you would like it.

We do not currently operate a paid bug bounty program.

04Out of scope

Reports from automated scanners without a demonstrated impact, missing security headers with no exploitable path, self-XSS, clickjacking on pages without sensitive actions, and vulnerabilities in third-party services we do not control.

05Customer security concerns

If you think your account or order has been affected, or you receive an email, text or call claiming to be from Usagazebos that looks suspicious, do not click any links or share details. Forward it to support@usagazebos.com. We will never ask for your password or full card number by email, text or phone.

06Contact us

Security reports and questions:

Usagazebos
3211 N Van Ness Blvd, Fresno, CA 93704, United States
Email: support@usagazebos.com