Reporting a security issue

Found something? Write security@melodocs.ai — a human reads it the same day, and we will tell you what we found and fixed.

Good-faith research is welcome; we do not lawyer people who help us.

A useful report has three things: what you did, what you expected, and what actually happened — screenshots or a request trace if you have them. You will hear back with our findings either way, including when the answer is “working as intended, and here is why.”