Nexow, Inc. takes the security of nexow.ai, x.nexow.ai, and this repository seriously.

This repo is the public marketing site. The product runtime, sandboxed widgets, credentials, and account systems are described at https://nexow.ai/security.

We accept reports against the latest main branch of this repository and against the production sites listed above.

Do not open a public GitHub issue for a security problem.

Email admin@nexow.ai with the subject line Security report. Include:

• A description of the issue and its impact
• Steps to reproduce, or a proof of concept if you have one
• Affected URL, commit, or component if known
• Whether you plan to disclose the report publicly, and on what timeline

You can also use the contact form at https://nexow.ai/contact and choose Support.

We aim to acknowledge reports within three business days and to keep you informed while we investigate. Please give us a reasonable window to fix the issue before public disclosure.

If you act in good faith, avoid privacy violations, service disruption, and data exfiltration, and report findings to us first, Nexow, Inc. will not pursue legal action related to the report.

Do not:

• Access accounts or data that are not yours
• Exploit a finding beyond what is needed to demonstrate it
• Attack anything other than this site, the Nexow application, or systems we explicitly authorize
• Use automated scanning that degrades availability

Ordinary bugs, i18n gaps, and feature requests belong in GitHub Issues. See CONTRIBUTING.md.