Contact support with the affected product, a short description and safe reproduction steps. Redact account details and use synthetic examples where possible.

Do not send working passwords, tokens, private keys or real buyer records. Avoid testing against another person’s account or making destructive changes to demonstrate an issue.