Security
Last updated 5 November 2026
The short version
- Found a security problem? Write to [email protected] with "Security" in the subject.
- Don't look at, change or keep anyone else's data, and give us time to fix the problem before telling anyone.
- We'll reply, and tell you when it's fixed.
Reporting a problem
Tell us what you found, the steps to see it again, and which app or page it's in, with its version.
Please don't:
- look at, change, delete or keep data that isn't yours, beyond what shows the problem;
- run tests that slow Dray down for other people;
- trick or pressure people who use or work on Dray;
- share the problem with anyone else before it's fixed.
Research in good faith
If you follow these rules, we won't take legal action against you for your research, and we'll thank you by name if you'd like.
How your account is protected
- Everything between your device and Dray is encrypted in transit.
- You sign in with a one-time code sent to your email. There's no password to steal.
- Stripe and Apple handle card payments. Card numbers never reach our servers.
- Assistants you connect get only the permissions you approved, and you can disconnect them at any time.