Security & Responsible Disclosure

01Our safeguards

• HTTPS encryption on every page and API call.
• Passwordless one-time-password login with rate limits on OTP requests.
• Role-based access — only authorised staff can see verification photos and fee ledgers.
• Fee amounts are calculated only on the server and never cached on your device by our app.
• Every online payment is confirmed with the gateway's cryptographic signature before it is marked paid.
• Image uploads are blocked at registration; identity photos are captured live to prevent impersonation.

02Staying safe

• Never share your OTP with anyone — Danspiration staff will never ask for it.
• Log out from shared or school computers.
• Keep your phone's lock screen enabled, since OTPs arrive on it.
• Pay only through the portal or at the academy desk.

03Fake messages & scams

Our official WhatsApp number is +91 98300 12345. We will never ask you to pay fees to a personal UPI ID, share card details over chat, or install a third-party app. If you receive such a message, do not pay — forward it to us.

04Reporting a vulnerability

If you believe you have found a security issue in this website or the portal, please email contact@danspiration.com with the subject "Security report". Include:

• The affected page or URL
• Steps to reproduce the issue
• The impact you believe it has

Our machine-readable contact is also published at /.well-known/security.txt.

05Scope & rules

Please act in good faith:

• Do not access, change or download other students' data — use only your own account.
• No denial-of-service, spam, social engineering of staff or parents, or physical attacks on the studio.
• Do not make real payments to test the payment flow.
• Give us reasonable time to fix the issue before sharing it publicly.

We will not take legal action against researchers who follow these rules.

06What happens next

We acknowledge reports within 3 working days, keep you updated on progress, and let you know when the issue is fixed. With your permission, we are happy to thank you publicly.