Reporting Security Vulnerabilities

If you believe you have discovered a security vulnerability in a Triptronic website, application, API, or other publicly accessible technology service:

• Please report the issue through the security contact details published by Triptronic / Aravam Tech Solutions Private Limited.
• Security reports should relate specifically to a potential security vulnerability or weakness.
• Please provide sufficient technical details to enable our team to understand, investigate, and reproduce the reported issue, including the affected URL, application, endpoint, steps to reproduce, and relevant screenshots or evidence where appropriate.
• Please report vulnerabilities promptly and responsibly and provide us reasonable time to investigate and address the issue before making any information public.
• Do not intentionally disrupt, degrade, overload, or interfere with the availability or performance of Triptronic’s websites, applications, APIs, servers, or other systems.
• Denial-of-service (DoS/DDoS) testing, stress testing, automated traffic generation, or activities that may adversely affect our services are not permitted without prior written authorization.
• Do not access, copy, download, modify, delete, disclose, or otherwise interfere with data belonging to Triptronic, its customers, drivers, employees, partners, vendors, or other users.
• Do not attempt to access accounts, credentials, personal information, payment information, booking information, or other data that does not belong to you.
• Use only accounts, devices, data, and systems for which you have legitimate authorization.
• Do not use a vulnerability to obtain any commercial, financial, personal, or other benefit.
• Do not perform social engineering, phishing, physical security testing, or attacks against Triptronic employees, customers, drivers, suppliers, or other third parties without prior written authorization.
• Please do not publicly disclose, publish, sell, or otherwise distribute details of a potential vulnerability until Triptronic has had a reasonable opportunity to investigate and, where appropriate, remediate the issue.

Responsible Disclosure

We appreciate responsible security research that helps us improve the security and reliability of Triptronic’s services.

When reporting a vulnerability, please provide as much relevant information as reasonably possible. This may include:

1. A clear description of the vulnerability.
2. The affected Triptronic website, application, API, or service.
3. Detailed steps required to reproduce the issue.
4. The potential security impact, if known.
5. Screenshots, logs, proof-of-concept code, or other supporting information, where appropriate.
6. Any suggested remediation or mitigation, if available.

Triptronic will review legitimate security reports and may contact the researcher for additional information or clarification.

Security Researcher Conduct

Security testing must be conducted in a manner that minimizes any risk to Triptronic, its customers, employees, drivers, business partners, and service providers.

Researchers must not:

• Access or attempt to access confidential or personal information belonging to another person.
• Modify or delete data.
• Create fraudulent bookings, transactions, accounts, payments, refunds, or other business activity.
• Interfere with live operations or customer services.
• Attempt to compromise third-party systems through Triptronic’s platforms.
• Introduce malware, ransomware, destructive code, or other malicious software.
• Conduct denial-of-service or other availability-impacting attacks.
• Publicly disclose a vulnerability before Triptronic has had a reasonable opportunity to address it.

Vulnerability Rewards

Where Triptronic operates a security recognition or vulnerability reward program, eligibility for any reward will be determined by Triptronic based on the nature, severity, originality, and responsible disclosure of the reported vulnerability.

A reward is not guaranteed for every report. Duplicate, previously known, out-of-scope, or non-security-related reports may not qualify.

Any reward, recognition, or payment is entirely subject to Triptronic’s applicable security program rules and Terms and Conditions.

Reporting Fraud or Unauthorized Transactions

If you believe that your Triptronic account has been compromised, or if you identify an unauthorized payment or transaction involving your payment card, bank account, UPI account, or other payment method, please immediately contact your bank or payment service provider and take appropriate steps to secure your account.

You should also notify Triptronic through our official customer support channels so that we can investigate the matter and take appropriate action within our systems.

For account or booking-related assistance, please contact:

Important Notice