Protection approach
Account and order access is protected through server-side authorization, secure sessions, rate limiting, input validation and recorded transaction trails. Security is not presented as a single certificate or an uptime guarantee.
Data minimization
The public privacy form does not ask for an identity document or national identity number. Do not add sensitive information to support messages when it is not needed for the request.
Security incidents
When a verified incident creates risk to personal data or service security, the issue is contained, records are reviewed and applicable notification duties are followed.
Responsible reporting
If you believe you found a vulnerability, send the affected address, reproduction steps and likely impact to support. Do not access real user data, alter data or disrupt the service.
Security scope
No internet service can guarantee zero risk. Vebivo applies reasonable technical and organizational safeguards, prioritizes verified findings and does not claim an unverified security certification.