Report Security Issues
Takybox LLC Last Updated: May 2026
At Takybox, security is something we take seriously. We protect our customers’ data, payments, and accounts with industry-standard tools — but no system is bulletproof. If you’ve spotted a vulnerability, suspicious activity, or anything that looks like a security risk on takybox.com, we want to hear about it.
This page explains how to report security issues responsibly and what happens after you do.
What to Report
We welcome reports about anything that could affect the security of our website, customer data, or payment systems. Some examples:
- Website vulnerabilities — bugs, exploits, or weaknesses in our code
- Account issues — suspicious logins, unauthorized access, or hijacked accounts
- Payment fraud — unauthorized charges or suspicious billing activity
- Phishing attempts — fake emails or websites pretending to be Takybox
- Data exposure — leaked customer info, passwords, or private data
- Malware or scams — suspicious links, downloads, or fraudulent ads claiming to be from us
- Social engineering — anyone impersonating Takybox staff or customers
If you’re not sure whether something counts as a security issue — report it anyway. We’d rather get a false alarm than miss a real threat.
How to Report
Email us directly at: contact@takybox.com
When you reach out, please include as much detail as possible. The more we know, the faster we can act:
- A clear description of the issue
- Where you found it (URL, page, account section, etc.)
- Steps to reproduce it (if it’s a website vulnerability)
- Screenshots or screen recordings if you have them
- The date and time you discovered it
- Your contact info so we can follow up
Subject line tip: Start your email with “SECURITY REPORT” so it gets flagged immediately.
What NOT to Do
To keep everyone safe and stay within legal bounds, please do not:
- Publicly disclose the issue before we’ve had a chance to fix it
- Share the vulnerability with third parties or post it on forums
- Attempt to exploit the issue beyond what’s needed to confirm it
- Access, modify, or download other users’ data
- Run automated scans, brute-force attacks, or denial-of-service tests on our site
- Use the issue for personal gain, fraud, or extortion
Responsible disclosure protects our customers and gives us a fair chance to fix the problem.
What Happens After You Report
Here’s our process once we receive your report:
- Acknowledgment. We’ll confirm we got your message within 2 business days.
- Investigation. Our team reviews the report and verifies the issue. This usually takes 3–7 business days, depending on complexity.
- Resolution. Once confirmed, we work to fix the vulnerability as quickly as possible.
- Follow-up. We’ll let you know when the issue is resolved and may credit you publicly (with your permission) for the discovery.
We don’t currently run a paid bug bounty program, but we sincerely appreciate every responsible report and may offer recognition or thanks where appropriate.
If Your Account Has Been Compromised
If you think your personal Takybox account has been hacked or accessed without your permission:
- Change your password immediately — both on Takybox and on any other site where you reuse the password
- Email us at contact@takybox.com with the subject line “ACCOUNT COMPROMISED”
- Include your order history details so we can verify your identity
- Check your bank statements for any unauthorized charges and contact your bank if needed
We’ll lock down your account, review recent activity, and help you recover access safely.
Phishing & Fake Takybox Communications
Scammers sometimes pretend to be legitimate businesses to steal data or money. Takybox will NEVER:
- Ask for your password by email, phone, or text
- Request your full credit card number outside our secure checkout
- Send links asking you to “verify” or “confirm” your account on a third-party site
- Demand payment in gift cards, cryptocurrency, or wire transfers
- Threaten to close your account unless you act immediately
If you receive a suspicious email or message claiming to be from Takybox, forward it to contact@takybox.com and delete it. Don’t click any links inside.
Our Commitment to Security
We use industry-standard security measures across our platform, including:
- SSL encryption on every page of takybox.com
- PCI-compliant payment processing through trusted providers like Stripe and PayPal
- Encrypted password storage — we never store passwords in plain text
- Regular security audits to identify and patch potential issues
- Restricted internal access to customer data on a need-to-know basis
Legal Safe Harbor
If you report a security issue in good faith, follow this policy, and don’t damage our systems or customers’ data, we won’t pursue legal action against you. We treat responsible reporters as partners, not adversaries.
That said, this safe harbor doesn’t apply if you violate the “What NOT to Do” rules above or break federal/state laws while researching the issue.
Contact Us
To report a security issue or ask questions about our security practices:
Takybox LLC
📍 Address: 1442 E Fleming Ave, Des Moines, IA 50313, USA
✆ Phone: +1 (515) 301-0812
✉ Email: contact@takybox.com
🌐 Website: www.takybox.com
Business Hours:
- Monday – Friday: 9:00 AM – 9:00 PM
- Saturday: 10:00 AM – 10:00 PM
- Sunday: Closed