Send a report
Use the contact form with Security report selected. Include an email address where we can contact you. Reports are stored privately and are never posted publicly.
The confirmation means your report was saved. It does not mean someone has read it yet.
What to include
- The affected Cocal page or feature, and when you observed the issue, including your timezone.
- Steps to reproduce using your own account or test data, what you expected, and what happened.
- The possible impact and a minimal example. For connector issues, name the chat app and the calendar action involved.
Report safely
Do not include passwords, sign-in links, access codes, other login details, or private calendar contents. Remove personal information from examples and error messages. If your evidence is sensitive, describe it instead of attaching it.
Test only with accounts and data you’re allowed to use. Don’t access other people’s data, disrupt the service, or post vulnerability details publicly.
For ordinary setup or calendar problems, use product support or the troubleshooting guide. See the privacy policy for how contact requests are handled.