Security & Incident Reporting

Report a security or privacy issue

If you believe you have found a security vulnerability, or that data handled by AdLumen has been exposed or misused, email security@szzxtech.com. Please include what you found, how to reproduce it, and how to reach you.

We acknowledge reports within 2 business days and keep you updated until the issue is resolved.

How we handle incidents

1. Triage: we confirm the report and assess its impact.
2. Contain: we stop the issue, including revoking and rotating any affected credentials or tokens.
3. Notify: if advertiser data may be affected, we notify the affected advertisers without undue delay. Security incidents involving Amazon information are reported to Amazon at security@amazon.com, as required by the Amazon Ads agreements and applicable law.
4. Fix and review: we fix the root cause and document what we changed.

Our security practices

• All traffic is encrypted with HTTPS/TLS.
• Amazon authorization tokens and API credentials are encrypted at rest and never shared with third parties.
• We never ask for or store Amazon passwords; access is granted only through Login with Amazon.
• Servers are protected by firewalls that only allow HTTPS and key-based administrative access; access is limited to authorized staff based on their job duties, and logged.
• Minimum password requirements and two-factor authentication are enforced for staff accounts.
• Each advertiser's data is kept separate and used only for that advertiser.
• Systems and dependencies are kept up to date with security patches, and data is backed up regularly.