Responsible Disclosure Policy

Party Center Software is providing this service to help ensure a safe and secure environment for all users.

If external parties find any sensitive information, potential vulnerabilities, or weaknesses, please help by responsibly disclosing it to ResponsibleDisclosure@fullsteam.com.

This policy applies to Party Center Software hosted applications and to any other subdomains or services associated with products. Party Center Software does not accept reports for vulnerabilities which solely affect marketing websites for Party Center Software, containing no sensitive data.

Security researchers must not:

• engage in physical testing of facilities or resources,
• engage in social engineering,
• send unsolicited electronic mail to Party Center Software users, including “phishing” messages,
• execute or attempt to execute “Denial of Service” or “Resource Exhaustion” attacks,
• introduce malicious software,
• execute automated scans or tools that could disrupt services, such as password guessing attacks, or be perceived as an attack by intrusion detection/prevention systems,
• test in a manner which could degrade the operation of Party Center Software systems; or intentionally impair, disrupt, or disable Party Center Software systems,
• test third-party applications, websites, or services that integrate with or link to or from Party Center Software systems,
• delete, alter, share, retain, or destroy Party Center Software data, or render Party Center Software data inaccessible, or,
• use an exploit to exfiltrate data, establish command line access, establish a persistent presence on Party Center Software systems, or “pivot” to other Party Center Software systems.

Security researchers may:

• View or store Party Center Software nonpublic data only to the extent necessary to document the presence of a potential vulnerability.

Security researchers must:

• cease testing and notify us immediately upon discovery of a vulnerability,
• cease testing and notify us immediately upon discovery of an exposure of nonpublic data, and,
• purge any stored Party Center Software nonpublic data upon reporting a vulnerability.

Jurisdiction and Contact Information

Fullsteam Software Holdings LLC (DBA Party Center Software) is a Delaware limited liability company. Our websites are controlled and operated from the United States. If you are an individual from the European Union, Iceland, Lichtenstein, Norway or any other jurisdiction with laws or regulations governing personal data collection, use, and disclosure that differ from United States laws, please be advised that we may store the information we collect in the United States or in other countries where we or our third-party service providers have operations. Personal data may also be transferred from the country of your residence to other countries, including the United States.

VeraSafe has been appointed asFullsteam Software Holdings LLC's representative in the United Kingdom for data protection matters, pursuant to Article 27 of the United Kingdom General Data Protection Regulation. If you are located within the United Kingdom, VeraSafe can be contacted in addition to or instead of compliance.pc13@fullsteam.com, only on matters related to the processing of personal data. 

To make such an inquiry, please contact VeraSafe using this contact form: https://verasafe.com/public-resources/contact-data-protection-representative or via telephone at: +44 (20) 4532 2003. Alternatively, VeraSafe can be contacted at:

VeraSafe United Kingdom Ltd.
 37 Albert Embankment 
London SE1 7TL
United Kingdom

VeraSafe has been appointed as Fullsteam Software Holdings LLC’s representative in the European Union for data protection matters, pursuant to Article 27 of the General Data Protection Regulation of the European Union. If you are in the European Economic Area, VeraSafe can be contacted in addition to compliance.pc13@fullsteam.com, only on matters related to the processing of personal data. To make such an inquiry, please contact VeraSafe using this contact form: https://verasafe.com/public-resources/contact- data-protection-representative or via telephone at: +420 228 881 031.

Alternatively, VeraSafe can be contacted at:

VeraSafe Ireland Ltd.
Unit 3D North Point House
North Point Business Park
New Mallow Road
Cork T23AT2P
Ireland

Contact Information

If you have any questions or suggestions regarding our Privacy Policy, please contact us:
By email: pcscompliance@partycentersoftware.com

Address: Fullsteam Software Holdings LLC (DBA Party Center Software) 
                   540 Devall Drive, Suite 301
                   Auburn, AL 36832
                

Phone: +1 888-804-1166 
https://www.partycentersoftware.com/