01
Understand the website boundary
This is not a cardholder portal, payment form, issuer system, or place to submit Shopify customer exports. Do not send payment credentials, card data, account passwords, or private order files to the public contact address.
Operational systems and providers have separate access, review, monitoring, and incident responsibilities.
02
Report a concern responsibly
Email hello@prepaidcardx.com with the affected URL, observed behavior, time, and safe reproduction steps. Do not include live personal data or exploit a finding beyond what is needed to demonstrate it.
Reporting a concern does not authorize disruption, social engineering, privacy invasion, persistence, or access to another person’s data.
03
Keep program responsibilities connected
A prepaid program requires appropriate security across the relevant Shopify information, decisions, recipient messages, support, and reporting. The program-controls pages explain the responsibilities to discuss without substituting for the controls of the actual program.