Security and account control.

Keep account credentials private. Review connected tools and revoke API keys you no longer use. If a key is exposed, revoke it and create a replacement. Never paste a private connection URL into a public ticket or screenshot.

Sharing a link can make content accessible to anyone who receives it. Treat private references and client work accordingly. Account access controls and a media URL’s visibility are different questions; check your intended audience before sharing.

Send security concerns to legal@objekt-ai.com with “Security report” in the subject. Include the affected URL, a description, and minimal reproduction steps. Do not include another person’s content, passwords, or full API keys.

A report is not authorization to access other accounts, extract data, disrupt the service, or perform destructive testing. Contact us to agree a scope before testing beyond your own account. No monetary bounty is offered by this page.

Contact the team for current information about hosting, access controls, data processing, and available contractual documentation. Read Service providers and Data Processing Agreement.