JARTOO / TRUST & SECURITY

Product Security &
Vulnerability Disclosure Policy

At JARTOO, protecting the security and privacy of our customers is a priority. We welcome responsible vulnerability reports and are committed to maintaining our products, software, and connected services throughout their published security support periods.

Last updated: October 15, 2026

Report a Security Vulnerability

OUR COMMITMENT

Security you can rely on

We take reported security issues seriously and work to investigate, assess, and address confirmed vulnerabilities in a timely manner. Our published security process aims to give customers and security researchers a clear point of contact and predictable communication.

48 hours

Acknowledgment target

 

7 days

Initial assessment target

 

14 days

Maximum interval between updates

01 / REPORTING

How to report a security vulnerability

If you discover a potential security vulnerability affecting a JARTOO product or service, please contact us using the channel below. We welcome reports from customers, security researchers, and other interested parties.

SECURITY VULNERABILITY REPORTING CONTACT

support@jartoo.com

Subject: Security Vulnerability Report – JARTOO

Website: https://jartoo.com

Email JARTOO Security

Please include the following information

01. Your name and contact email address.

02. The affected product name and model number.

03. The firmware, software, or application version, if applicable.

04. A detailed description of the suspected security vulnerability.

05. Steps to reproduce the issue, if available.

06. Potential security impacts and supporting evidence.

07. Any other relevant technical information.

Please avoid including unnecessary personal information or sensitive customer data.

02 / SECURITY RESPONSE

How we handle vulnerability reports

JARTOO follows a structured process to assess, validate, and address reported vulnerabilities. Specific fixes are prioritized based on severity and risk.

01

Acknowledgment

We aim to acknowledge receipt of a security vulnerability report within 48 hours, confirming that the report was received and explaining the next steps.
Title

02

Initial assessment

Our team aims to complete an initial assessment within 7 calendar days of receiving a sufficiently detailed report. Additional information may be requested to verify the issue and evaluate its potential impact.
Title

03

Investigation and remediation

Once confirmed, we assess the severity, affected products, potential risks, and appropriate remediation measures. Critical vulnerabilities are prioritized; interim risk mitigation guidance may be provided where appropriate.

Target remediation timeframes

VULNERABILITY SEVERITY

TARGET REMEDIATION TIME

Critical

Within 30 calendar days

High

Within 60 calendar days

Medium

Within 90 calendar days

Low

Within 90 calendar days, or the next appropriate security update

These timeframes are targets rather than guarantees. Actual remediation timelines may vary depending on technical complexity, product architecture, severity, testing requirements, and the availability of appropriate fixes.

04

Progress updates

We aim to provide status updates to the reporting party at least once every 14 calendar days until the issue is resolved or otherwise closed with an explanation. Updates may cover issue confirmation, investigation status, remediation progress, mitigation measures, and fix availability.
Title

05

Resolution and disclosure

Following successful remediation and verification, JARTOO may publish a security advisory or notify affected customers as necessary. Advisories may identify affected models, the issue, impacts, and recommended corrective actions. We encourage coordinated disclosure to reduce the risk of harm to customers.

03 / RESPONSIBLE DISCLOSURE

Responsible security research

JARTOO appreciates responsible security research that helps improve the safety of our products and services. We ask researchers to:

01. Conduct research only on devices or systems they own or are explicitly authorized to test.

02. Avoid accessing, collecting, modifying, or disclosing other users’ personal information.

03. Refrain from disrupting products, services, or networks.

04. Avoid destructive testing, denial-of-service attacks, and unauthorized access.

05. Give JARTOO a reasonable opportunity to investigate and address reported vulnerabilities before public disclosure.

06. Comply with all applicable laws and regulations.

04 / SECURITY UPDATE SUPPORT

Product security update support policy

JARTOO is committed to providing security support for applicable products during their published security support periods. During these periods, we will assess relevant vulnerabilities and provide appropriate remediation measures, which may include firmware updates, software updates, security patches, or other risk mitigation guidance.

The minimum security support period and corresponding end date for each listed product model are provided below.

Minimum security support schedule

PRODUCT MODEL

SUPPORT PERIOD

SUPPORT END DATE

JT-VBM002 — Video Baby Monitor

3 years

2028-12-31

JBM550 — Smart Baby Monitor

3 years

2029-12-31

JBM360 — Baby Monitor

3 years

2029-12-31

Smart Body Composition Scale

3 years

2029-12-31

What the support period means

Security support periods are separate from product warranty periods. The published security support end date represents the minimum date until which JARTOO commits to providing applicable security support for the listed product model.

Where technically applicable, security fixes may be delivered through firmware or software updates. For products that do not support user-installed updates, JARTOO will assess appropriate mitigation or corrective measures.

After the published security support end date, security updates and vulnerability remediation are no longer guaranteed unless JARTOO announces an extension. JARTOO may extend support periods and will update this page accordingly.

05 / CUSTOMER GUIDANCE

Customer security recommendations

To help protect your JARTOO products, we recommend that you:

01. Use the latest available firmware and application versions.

02. Keep connected mobile devices and home networks updated.

03. Use strong, unique account passwords where accounts are supported.

04. Avoid sharing device access with unauthorized individuals.

05. Download JARTOO applications and updates only from trusted or official sources.

06. Contact JARTOO if you notice suspicious device behavior or potential security issues.

06 / POLICY UPDATES & CONTACT

Questions about product security?

JARTOO may periodically review and update this policy to reflect changes in security practices, applicable regulations, or product support commitments. The latest version will be published on our official website.

For security vulnerability reports, product security questions, or information about security support periods, contact:

support@jartoo.com

Subject: Security Vulnerability Report – JARTOO

We appreciate your assistance in helping us maintain the security and reliability of JARTOO products.

Contact JARTOO Security