Report Security Issues

Report Security Issues

We take the security of our customers and our website seriously. If you believe you have found a security vulnerability on velnoba.com, or you received a suspicious message that claims to come from Velnoba, please tell us.

1. Key Information

• Report to: info@velnoba.com with the subject line “Security”
• Acknowledgement: within 24 hours
• Card data: payments are processed by Stripe – card details never touch our servers
• We never ask for: your card number, password or one-time codes by e-mail, phone or text message

2. How to Report a Vulnerability

E-mail info@velnoba.com with the subject line “Security”. Please include the affected page or URL, a description of the issue, the steps to reproduce it and any screenshots. We acknowledge every report within 24 hours and keep you informed while we investigate and fix it.

3. Guidelines for Researchers

Please act in good faith: only test against your own account, do not access, change or delete other customers’ data, do not disrupt the website (no denial-of-service or automated high-volume testing), and give us reasonable time to fix an issue before sharing it publicly. We will not pursue action against anyone who reports an issue in line with these guidelines.

4. Phishing and Suspicious Messages

Official messages from us come only from the velnoba.com domain. We never ask for your card number, password or one-time codes by e-mail, phone or text message. If you receive a message or see a website that pretends to be Velnoba, forward it to info@velnoba.com and do not click its links.

5. If You Think Your Account Is Compromised

Change your password from My Account straight away and contact us at info@velnoba.com or +1 302-481-9112. If you see a charge you do not recognize, tell us and your bank.

6. How We Protect Your Data

The whole website is served over HTTPS. Payments are handled by Stripe, our PCI-compliant payment processor, so your full card number is never stored on our servers. More details are in our Privacy Policy.