Guiding principle
rabitmoon is built for clear visual communication. We protect creative control, platform integrity and honest use at every step.
1. Security approach
rabitmoon separates the public website, authenticated application, API, administration and asset-processing surfaces.
2. Authentication
Account authentication is handled through managed identity infrastructure. Never share credentials, verification codes or access tokens with support.
3. Assets and documents
Uploaded assets are processed through controlled storage paths. Access rules and signed delivery mechanisms are used where private assets require them.
4. Responsible disclosure
Report a suspected vulnerability privately to hello@rabitmoon.com with reproduction steps and minimal sensitive data. Do not publicly disclose customer information or actively exploit a finding.