Security
Security & incident reporting

Preço Certo Precificação e Indicadores Financeiros LTDA (CNPJ 27.559.516/0001-27) operates precocerto.co, ads.precocerto.co and the Preço Certo platform at sys.precocerto.co. This page describes how to report security issues and how we handle them.

What to report

How to report

Send an e-mail to security@precocerto.co with the subject “Security report”. Include a description of the issue, the affected URL or system, and the steps to reproduce it, if applicable. Reports in English or Portuguese are welcome.

How we handle reports

  1. Acknowledgement: we confirm receipt of every report to the reporter.
  2. Tracking: every report is registered and tracked in our internal incident register until it is closed.
  3. Investigation: we assess the severity, investigate the issue and keep the reporter informed of the progress.
  4. Resolution: we resolve or mitigate confirmed issues and record the corrective actions taken.
  5. Notification: security incidents involving Amazon data are reported to Amazon within 24 hours of detection, as required by Amazon's data protection policies. Affected customers and the Brazilian data protection authority (ANPD) are notified when required by law (LGPD).

Responsible disclosure

Please give us reasonable time to resolve an issue before any public disclosure, and do not access, modify or delete data that does not belong to you.

Em português

Para reportar uma vulnerabilidade de segurança, uma questão de privacidade de dados ou qualquer uso indevido, real ou suspeito, de dados da Amazon ou de clientes, envie um e-mail para security@precocerto.co. Confirmamos o recebimento, registramos e acompanhamos cada relato, investigamos, mantemos quem reportou informado e corrigimos os problemas confirmados. Incidentes que envolvem dados da Amazon são comunicados à Amazon em até 24 horas após a detecção.

Machine-readable contact: /.well-known/security.txt