Last updated: 21 October 2026 - Security

Who is responsible

Adam Charvát, Co-Founder & CTO, is responsible for the security of Appfleece's Shopify apps (Globe, Payflow, Feedflock, Charm and others), their backends, APIs and infrastructure.

Contact: adam@appfleece.com

Reporting a vulnerability

If you find a security issue in one of our apps or websites, email us at adam@appfleece.com. Please include:

• The affected app, URL or endpoint
• Steps to reproduce
• What an attacker could do with it

We confirm receipt within 3 business days and keep you updated until the issue is fixed.

Testing rules

• Test only on your own Shopify development store, never on a merchant's live store
• Do not access, change or delete data that isn't yours
• No denial-of-service, spam or social engineering
• Give us reasonable time to fix the issue before disclosing it

We do not run a paid bug bounty program.

Merchant data

How we process merchant and customer data is described in our Privacy Policy. A machine-readable contact is published at /.well-known/security.txt.