> ## Documentation Index
> Fetch the complete documentation index at: https://recontrol.money/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Reporting a security issue

> How to tell us about a vulnerability in Recontrol, what to include, and what happens next.

*Last updated 22 October 2026.*

Found a security issue in the apps, the web app, the API or these pages? Tell us before anyone else, so we can fix it first.

Email **[support@recontrol.money](mailto:support@recontrol.money?subject=Security%20report)** with "Security report" in the subject (also in the web app's [security.txt](https://app.recontrol.money/.well-known/security.txt)). Include what the issue is and what someone could do with it, the steps to reproduce it, the app version or browser, and how to reach you.

## While you look

* Use only your own account and spaces. Stop as soon as you reach data that isn't yours.
* Don't degrade the service: no denial of service, heavy scanning or spam.
* No social engineering, and don't test our providers (Plaid, Zerodha, Apple, Google and the rest) through Recontrol.
* Give us reasonable time to fix it before you tell anyone.

## What happens next

Every message is read, and we aim to reply within 2 business days. If a breach affects your data, we notify you and the authorities as the law requires; see the [Information Security Policy](https://recontrol.money/docs/legal/security.md). There is no bug bounty.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.