Security & Responsible Disclosure

We work to protect your account and data with industry-standard measures, including encryption in transit, database row-level security that isolates each account's and business's data, access controls, and secret scanning to keep sensitive values out of places they don't belong. No system is perfectly secure. Help us keep ARound safe by using a strong, unique password, enabling two-step verification where available, and reporting anything suspicious. Responsible disclosure: if you discover a security vulnerability, please report it to us privately through Settings → Help (or the security contact listed there) instead of disclosing it publicly. Give us reasonable time to investigate and fix it. We appreciate good-faith research and will not pursue action against researchers who follow this policy, avoid privacy violations and service disruption, and do not access or modify data that isn't theirs. If a data breach affects you, we will notify affected users and authorities as required by law.