Incident Reporting Policy

  • Home
  • Incident Reporting

1. Purpose

2. Reportable Incidents

  • Phishing or Social Engineering: Emails, calls, or messages pretending to be from MagicTradeBot.
  • Unauthorized Access: Suspicious logins, account takeovers, or API key abuse.
  • Data Breaches: Any exposure of personal or trading information.
  • Platform Vulnerabilities: Bugs, misconfigurations, or other weaknesses in the system.
  • Malware or Ransomware: Harmful links or files distributed through MagicTradeBot’s services.

3. How to Report an Incident

  • Email: Send all relevant details to sales@magictradebot.com
    Use the subject line:
    "SECURITY INCIDENT: [Short Description]"
    Example: SECURITY INCIDENT: Phishing Email Attempt

4. Information to Include

  • Affected Account or Service: Include the associated username or email address.
  • Description: Clearly explain what occurred, when it happened, and how it was identified.
  • Supporting Evidence: Attach screenshots, logs, email headers (for phishing), or error messages.
  • Impact: Describe any actual or potential consequences (e.g., data loss, unauthorized transactions).

5. After You Report

  • Acknowledgment: We will confirm receipt within four (4) business hours.
  • Investigation: Our security team will assess and prioritize the report.
  • Communication: You’ll be kept informed about progress and required actions.
  • Resolution: Once addressed, we will share any relevant remediation steps (e.g., patches, password resets).

6. Confidentiality & Non-Retaliation

  • Confidentiality: All reports are treated confidentially and are accessible only to authorized personnel.
  • Non-Retaliation: We strictly prohibit retaliation against anyone who reports an issue in good faith.

8. Compliance & Legal Obligations

  • GDPR/CCPA Compliance: If a data breach may affect users’ rights, we will notify authorities and affected individuals within 72 hours.
  • Bug Bounty: Ethical hackers must adhere to our Bug Bounty Program guidelines for responsible disclosure and testing.

9. Contact Us