Station Chat Responsible Disclosure Policy

Mednovations Sdn Bhd welcomes responsible security research that helps us improve Station Chat.

Security contact: legal@station.chat

1. What To Include In A Report

Please include, where possible:

• the affected Station Chat version;
• affected component or service;
• clear reproduction steps;
• expected and observed behaviour;
• security impact;
• proof-of-concept information where appropriate;
• your preferred contact details.

2. Please Do Not

When researching or reporting a vulnerability, please do not:

• access, copy or alter data belonging to another customer or user;
• intentionally disrupt production systems;
• perform denial-of-service or resource-exhaustion testing against live infrastructure;
• use social engineering against staff or customers;
• install malware;
• attempt physical intrusion;
• publicly disclose an unresolved vulnerability before we have had a reasonable opportunity to investigate and address it;
• retain confidential information obtained accidentally during research.

3. Good-Faith Research

If you act in good faith, make reasonable efforts to avoid harm, respect privacy, and comply with this policy, we will make reasonable efforts to work constructively with you on legitimate security findings.

This policy does not authorise activity that would otherwise be unlawful, and it does not create a waiver of rights or legal obligations.

4. Our Response

For credible reports, we will make reasonable efforts to:

• acknowledge receipt;
• investigate the issue;
• request additional information where necessary;
• assess severity and affected versions;
• develop and test an appropriate response;
• communicate material progress where appropriate.

Timelines may vary according to severity, complexity and the need for coordinated testing or deployment.

5. Public Disclosure

Please coordinate public disclosure with us so that customers have a reasonable opportunity to receive and install any necessary fix.

6. Contact

Security reports: legal@station.chat

Mednovations Sdn Bhd (1307256-P)9-2, Jalan Dataran Suria 15/7/1, Dataran Suria, 42300 Bandar Puncak Alam, Selangor Darul Ehsan, Malaysia