How to report
Email security@plainbooking.com with:
- the affected URL or page,
- the steps to reproduce it,
- what you think the impact is, and
- any evidence, with personal details redacted.
Never send passwords, sign-in tokens, or guest or booking details.
Test responsibly
- Only use accounts and workspaces that you own or have permission to use.
- If you reach anyone else’s data, stop, don’t keep or share it, and tell us.
- Don’t disrupt the service: no denial-of-service, load or automated flooding tests.
- No social engineering, phishing or spam, and no physical attempts.
What’s in scope
Services that Plainbooking runs: plainbooking.com and app.plainbooking.com. Our customers’ own websites and the third-party providers we use are not in scope; report issues with those to their owners.
What we can’t promise
This page explains how to report an issue. It isn’t permission to test anything beyond what’s described above, and we don’t offer rewards or promise a response time.
Everything else
For questions about your account or bookings, contact support@plainbooking.com. Our machine-readable contact details are in security.txt.