1. Reporting scope and authorization
We welcome reports about suspected vulnerabilities or inadvertent exposure on CLR-operated website features. A provider's infrastructure, another company's portal or a customer's device is not automatically within CLR's authority to authorize research.
This policy provides a reporting channel. It is not general authorization to scan, exploit, bypass access controls, use social engineering, run denial-of-service tests or access another person's records. Obtain written permission defining the scope before conducting testing that requires authorization.
2. What to include
Send "Website security report" to info@clrautotransport.com. Describe the affected URL or feature, likely impact, time observed and non-destructive steps that demonstrate the issue. Supply only the minimum redacted evidence needed and a way to contact you.
Do not attach stolen credentials, full personal records or a live malicious file. If private information appears unexpectedly, stop interacting with it and describe the exposure without copying additional records. Ask for an appropriate channel if more sensitive technical detail is genuinely necessary.
3. Handling, disclosure and compensation
CLR may investigate, seek clarification, involve a responsible provider and determine corrective action based on impact. A fixed acknowledgment or remediation deadline is not established here. Coordinate disclosure to avoid exposing users while an issue is evaluated.
No paid bug bounty, automatic credit or legal safe-harbor promise is created by submitting a report. That does not prevent good-faith reporting through this channel or any protected disclosure. CLR cannot grant permission or waive another organization's rights over its systems.
4. Questions, requests and document updates
Contact CLR Auto Transport Corp., 8450 Whitcomb Street, Merrillville, IN 46410, at info@clrautotransport.com, 888-257-2677, or our Contact Us form. Identify the policy or issue so we can route the request.
This document supplements CLR's Privacy Policy and Terms of Use. Applicable law and accepted service agreements continue to govern their respective subjects. Updates are identified by the date shown on the page and do not retroactively change accepted service arrangements. Other policies are available in the Legal Center.