Hey, just as a heads up I found a vuln that exposes all customer email addresses and contacts for all users. I'll responsibly disclose using the 'contact us' feature.