SAGG Security

Version 1.0 - 2026-10-25.

Report a vulnerability

Write to security@privatedeskai.com. Please describe what you found, how to repeat it, and what it could affect. English is preferred. We read every report and answer when we can.

The machine-readable contact is at /.well-known/security.txt.

Please

• give us reasonable time to fix a problem before you tell others;
• do not read, change or delete data that is not yours;
• do not degrade the service for other users;
• do not test with other people's accounts.

We do not run a bounty programme and do not promise a reward.

What we do

Access to our servers is by SSH key only. Backups are encrypted. Card details are handled by Stripe and never reach our servers. See the Privacy Policy for the data we keep.

Changes in this version

• 1.0 (2026-10-25): first version.