Support and security
How long support lasts, why marketplace and direct purchases differ, how security fixes reach you, and how to report a vulnerability.
Support and updates run on the same clock for direct purchases. Marketplace purchases follow the marketplace's own support policy. That difference is why you may read "6 months" in one place and "12 months" in another.
What is included#
| Where you bought | Technical support | Update window |
|---|---|---|
| Directly on bondry.org | 12 months (365 days) from the purchase date, extendable | 12 months from the purchase date, extendable |
| Envato marketplace (CodeCanyon) | 6 months, per the Envato support policy, extendable on Envato | Follows the support period recorded when you claim the purchase |
An extension bought here adds 365 days to both support and updates. Support covers the product as supplied: installation problems, bugs and questions about how a feature works. It does not cover custom development, server administration or third-party code.
How to get support#
Open a ticket from your account, or use the contact form and choose Technical support. Support is provided primarily in English. Include your Bondry version and the exact error message, with passwords, keys and member data removed.
Update window#
While the window is open you receive every release of your product: features, fixes and security releases. When it closes, the software keeps running and everything published inside the window stays available. See Updates for how the updater works.
Security policy#
Critical security fixes for the latest minor version remain available for 12 months after your update window ends, without an extension.
- Only the latest minor version of each product receives security releases. If you are on an older minor, update to the latest one inside your window first.
- A security release is marked Security in the changelog.
- The updater in your panel honors security releases from core 1.0.3. On earlier versions, download the package from your account downloads and upload it in System > Updates.
Reporting a vulnerability#
Use the contact form and choose Technical support. Do not post details in public forums, reviews or issue trackers until a fix is released. We acknowledge every report within 5 business days and keep you informed until it is resolved. There is no bug bounty program.
After the window#
- The software keeps running. A license is perpetual; nothing is switched off when the window closes.
- You can still download every release published inside your window.
- Security releases published within 12 months after the window ends stay available to you, as described above.
- Newer feature releases and included support require an extension.