How to report
Email contact@igsaver.in with a clear description, affected URL, reproducible steps, impact, and non-sensitive evidence. Allow reasonable time to investigate before public disclosure.
Research rules
- Use only accounts and data you own or are authorised to test.
- Do not access, retain, alter, or disclose another person's data.
- Do not use denial-of-service, spam, social engineering, automated high-volume scanning, or destructive techniques.
- Stop and report immediately if you encounter personal data or gain unintended access.
- Do not test Instagram, Meta, hosting providers, or other third parties through this policy.
Our response
We aim to acknowledge credible reports, investigate proportionately, and communicate remediation progress where practical. This is not a bug-bounty programme and does not promise payment.