Vesperion GateVisit Thicket

Trust and security

Security response

Keeping customer data safe is a responsibility we take seriously. If you have found a security problem in Thicket, LensCherry or this site, we want to hear about it, and here is exactly what happens after you tell us.

Reporting a security problem

A vulnerability in our products or site
Email [email protected] with what you found, how to reproduce it, and how to reach you. We read every report.
Your account is under attack
If you think someone else has used your account, change your password in the product right away, which signs out every other browser, turn on two-factor authentication, and then contact support so we can look at the account with you.
Something urgent or sensitive
Email [email protected]. We answer as soon as we can.
Anything that isn't urgent
Send a support request and we will take it from there.

What happens after you report

We work with security researchers to keep up with the state of the art in web security. If you submit a report, this is the process, in order.

  1. We acknowledge your report
    You hear back from a person, not an autoresponder, so you know it reached us.
  2. We triage it
    We work out what is affected, how badly, and how quickly it needs a fix.
  3. We investigate and fix it
    We trace the cause and ship the fix. If the cause sits in a dependency or a provider, we work with them and keep you informed.
  4. We don't disclose it early
    Nothing about the issue is published until it has been investigated and fixed. We will work with you on severity and impact in the meantime.
  5. We tell customers when they're affected
    If customer data or accounts were affected, we notify the affected customers and post a note in the policy update history.
  6. We credit you
    Once the issue is resolved, we thank you here, by name, with your permission.

Bug bounty

We don't run a paid bug bounty program today. We do credit researchers who report responsibly, and we respect the time and talent behind a good report, so please send it anyway.

Thanks for working with us

Researchers who find, help fix and responsibly disclose a security flaw are named here with their permission. This page began on October 22, 2026, and no reports have been credited yet.

Where your data lives and how we protect it

The security overview covers data locations, encryption, backups, access and deletion. The policy update history records notices that affect customers.