Security is part of how we build Imólè, an app of Sundre Communication.
How we protect Imólè
- HTTPS everywhere, with HSTS and strict security headers
- Payments handled by Paystack; card details never touch our servers
- Passwords stored only as strong one-way hashes; sign-ins rate-limited
- Two-step verification for Imólè staff, and role-based staff access with an audit log
- Private, logged access to verification documents
- Phone numbers and links masked in messages to stop off-platform scams
- Signed, verified payment webhooks and regular dependency updates
Keeping your account safe
Use a strong, unique password, never share your login or one-time codes, invite staff with their own accounts instead of sharing yours, and remove staff who leave. Imólè will never ask for your password or a one-time code by phone, WhatsApp or email.
Report a security issue
Email [email protected] with “Security report” in the subject, the steps to reproduce and the impact. We will acknowledge within 3 working days and keep you updated.
Please test only against your own account, do not access or change other people’s data, do not run denial-of-service, spam or social-engineering tests, and give us reasonable time to fix the issue before telling others. If you follow these rules we will not take legal action against you for your research, and we are happy to credit you.
Questions: [email protected]. Last updated 18 October 2026. Imólè is an app of Sundre Communication. See all our policies.