Payment data
Card details are collected by configured payment providers. Onx does not store raw card numbers or CVC data.
Responsible protection and disclosure.
Onx uses layered controls across sessions, data access, payments, server configuration and operational logging.
Security
Report a vulnerability
Send a concise report to security@onxapp.co. Include the affected URL, impact and reproducible steps without accessing data that does not belong to you.
Safe research
Do not disrupt service, use social engineering, access other customer data or publish a vulnerability before a coordinated resolution.