Found something? Tell us.

Reporting an issue

Email support@switchwithai.com with "Security" in the subject. Include what you found, the steps to reproduce it, and the impact you think it has. A proof of concept helps; a video is rarely necessary.

We aim to acknowledge a report within two business days and to tell you what we intend to do about it within ten. We are a small team, so we would rather give you an honest timeline than a fast one we cannot keep.

What we ask

Test only against your own account and your own documents. Do not access, modify, or download another user’s resume, job description, or run history.

Do not run automated scanners against the live service, and do not attempt denial of service, spam, or social engineering of our team or our providers.

Give us a reasonable chance to fix the issue before disclosing it publicly.

What we will do

We will not pursue legal action against anyone who follows the guidance above in good faith.

We will credit you when the fix ships, if you would like us to.

We do not currently run a paid bounty programme. We would rather say so plainly than imply one.

In scope

www.switchwithai.com, api.switchwithai.com, and the SwitchWithAI Chrome extension.

Out of scope: findings that only affect unsupported browsers, reports generated entirely by an automated scanner with no demonstrated impact, missing hardening headers with no exploit path, and anything affecting a third-party service we do not control.

How your data is handled

Resumes and job descriptions are processed to produce your tailored document and are not used to train models. Deleting your account removes your resumes, tailored files, run history and stored files. The full detail is in the Privacy Policy.