Security Policy

1. Reporting a vulnerability

If you believe you have found a security vulnerability in a website or service run by Elite Performance Exclusive LLC, please tell us privately by emailing support@eliteperformanceexclusive.com. Please include:

• the address (URL) or part of the service affected;
• the steps needed to reproduce the issue;
• what an attacker could do with it, as you understand it;
• how we can reach you with questions.

2. What happens next

We will acknowledge your report within 48 hours, investigate it, and work with you to address it. We will keep you informed as we fix it and let you know when it is resolved.

3. While you investigate

• Only access data that belongs to you. If you come across someone else's information, stop and tell us - do not keep or share it.
• Do not change or delete data, and do not disrupt the service (no denial-of-service or heavy automated testing).
• Do not use social engineering, phishing or physical access.
• Give us a reasonable time to fix the issue before you disclose it publicly.

4. Scope

This policy covers eliteperformanceexclusive.com and its subdomains. Third-party services we use (for example payment and e-signature providers) have their own reporting channels.

5. Machine-readable contact

Our contact details for security reports are also published at /.well-known/security.txt.