Skip to main content
Last updated 22 October 2026. Found a security issue in the apps, the web app, the API or these pages? Tell us before anyone else, so we can fix it first. Email support@recontrol.money with “Security report” in the subject (also in the web app’s security.txt). Include what the issue is and what someone could do with it, the steps to reproduce it, the app version or browser, and how to reach you.

​
While you look

  • Use only your own account and spaces. Stop as soon as you reach data that isn’t yours.
  • Don’t degrade the service: no denial of service, heavy scanning or spam.
  • No social engineering, and don’t test our providers (Plaid, Zerodha, Apple, Google and the rest) through Recontrol.
  • Give us reasonable time to fix it before you tell anyone.

​
What happens next

Every message is read, and we aim to reply within 2 business days. If a breach affects your data, we notify you and the authorities as the law requires; see the Information Security Policy. There is no bug bounty.