Security and Vulnerability Reporting

Report a security issue

Safe reporting of domain and payment incidents

For a suspected Professional-domain takeover, unusual alias traffic or phishing claiming to be an onboarding email, contact support with the domain and redacted message headers. Never forward active activation URLs, ownership tokens, mailbox passwords or private signing keys. Stripe billing messages should be verified against the secure customer account and the actual transaction, not email appearance alone.

Email support@aimailcloud.com with the subject “AI Mail Cloud Security Report” for account compromise, malicious messages, abnormal logins or suspected service vulnerabilities. For legal disclosure or privacy matters, contact legal@aimailcloud.com.

Helpful details

Include the affected URL or mailbox name, approximate time with time zone, reproducible steps and appropriately redacted logs or headers. Do not include passwords, API tokens, private keys, full payment details or another customer’s personal messages.

Responsible investigation

We review credible security reports and aim to address issues according to risk and impact. Please do not exploit a suspected vulnerability, access another account, exfiltrate data, disrupt the service or publicly disclose sensitive details while reporting.

Abuse reports

Phishing, spam and spoofed email may also be reported to support@aimailcloud.com. See Acceptable Use and Anti-Spam and Deliverability.