Security

Club Oro uses short-lived exchange identifiers, explicit mutual approval, private-by-default contact fields, encrypted provider credentials, payment-provider webhooks and row-level data controls.

Report a vulnerability

Email security@cluboro.co with the affected URL, reproduction steps and potential impact. Please avoid accessing other people’s data, disrupting service or publicly disclosing an unresolved issue. We will acknowledge valid reports and coordinate remediation.

Account safety

Use a sign-in method you control, review linked providers periodically, and report unexpected exchanges or account activity. Club Oro staff will never ask for your password or one-time code.