If you discover a security vulnerability in FreePaperBanana, please report it responsibly:

1. Do not open a public GitHub issue for security vulnerabilities.
2. Email efradeca@gmail.com with a description of the vulnerability.
3. Include steps to reproduce the issue if possible.
4. Allow up to 72 hours for an initial response.

This project relies on the Google Gemini API for inference. Security concerns related to the Gemini API itself should be reported directly to Google.

FreePaperBanana does not collect, store, or transmit user data beyond what is sent to the Gemini API during diagram generation.

• Never commit your .env file or API keys to version control.
• Use environment variables or the freepaperbanana setup command to manage credentials.
• Review the .gitignore to ensure sensitive files are excluded.