Security point of contact
Report a suspected vulnerability, data exposure or security incident to care@worldofwillpower.com with the subject line “Security Report”, or on WhatsApp at +91 74982 85423. Reports are acknowledged within 24 hours.
Responsible disclosure
- Please give us a reasonable window to investigate and remediate before any public disclosure.
- Do not access, alter, download or retain data belonging to other people; do not run denial-of-service, spam or social-engineering tests against our staff or customers.
- Include steps to reproduce, affected URLs, timestamps (IST) and any supporting evidence.
- We do not take legal action against researchers who act in good faith and within this policy.
Our safeguards
- HTTPS/TLS for all traffic to this website.
- Least-privilege access control and named accounts for internal systems.
- Confidentiality obligations on staff, advisers and processors under written contract.
- Periodic review of access, dependencies and third-party integrations.
Logs, time synchronisation and incident reporting
In line with the CERT-In Directions, 2022 (No. 20(3)/2022-CERT-In) we maintain logs of relevant system and communication interactions for 180 days within India, synchronise systems to Indian Standard Time, and report reportable cyber incidents to CERT-In within 6 hours of noticing them.
Personal data breaches
Where an incident affects personal data, we notify the Data Protection Board of India and every affected Data Principal as required under the Digital Personal Data Protection Act, 2023, with the nature and extent of the breach, likely consequences and the measures taken.
What we will never ask for
We never ask for passwords, full card numbers, CVV or one-time passwords over call, email or WhatsApp. If someone claiming to represent us does, please report it to us immediately and to the National Cyber Crime Reporting Portal (cybercrime.gov.in) or helpline 1930.