Never liked CHaracter.AI. They ran a bug bounty program before they were acquired.

I found multiple critical bugs (ability to access other user accounts without even having to guess or know the username) and they patched them, told me they were 'informative' and didn't pay me anything.