Security & Responsible Disclosure
These notices apply to the GuwinUS Identity service operated by Guwin Universal Services LLC. Specialized services, including Crypto, Mail and other platforms, may have additional terms and privacy notices.
Our safeguards
We use server-side access controls, password hashing, MFA/passkeys, OAuth authorization code with PKCE, audit trails, scoped tokens and protected sessions. No system should be assumed immune from compromise.
Report a vulnerability
Provide a safe reproduction and impact summary to the security contact. Do not test other users’ accounts, exfiltrate data, disrupt availability or publish vulnerabilities before coordinating disclosure. A formal vulnerability disclosure program and response SLAs require operator approval.
Operator: Guwin Universal Services LLC, Georgia, United States
Privacy requests: [email protected]
Legal notices: [email protected]
Mailing address: 434 Fairview Road, Brooks, Georgia 30205