Privacy and Confidentiality Policy

BugHunt is a platform owned and managed by BUG HUNT PLATFORMA DE RECOMPENSA T.I. S.A, joint-stock company registered with the CNPJ under nº 37.248.277/0001-48, with headquarters in the city and state of São Paulo, at Avenida Brigadeiro Faria Lima, 1,461, set 41, PO Box 223, Torre Sul, Jardim Paulistano, CEP 01452-921 (“BugHunt”).

Our platform (“Platform”) serves as a means for companies to offer remuneration so that professionals with technical knowledge in computing and information technology find faults in security in its systems, in accordance with rules established and published on the Platform, to which Specialists must formalize acceptance before engaging in any Program.

This Privacy Policy, together with the Terms and Conditions of Use, describe the terms and conditions conditions applicable to access and use of the Platform by Customers and Experts.

BugHunt cares and is committed to protecting your privacy. This Privacy Policy explains how BugHunt uses and protects data we collect and applies to any personal information we you provide to BugHunt. Therefore, we ask that you please read this Privacy Policy carefully. Privacy, therefore, by clicking at the end on “I HAVE READ AND AGREE WITH THIS PRIVACY POLICY”, YOU EXPRESSLY DECLARE THAT YOU AGREE TO THE TERMS OF THIS POLICY, AS WELL AS TO ALL PROCESSING PROVIDED TO THE DATA MADE AVAILABLE TO BUGHUNT. IF YOU DO NOT AGREE TO THE FOLLOWING TERMS, YOU SHALL NOT USE OR ACCESS THE SERVICES PROVIDED BY THE PLATFORM.

This Privacy Policy (“Policy”) provides for the processing of personal data or other information such as financial, professional, banking, IP data, among others, when browsing, access and/or use the Platform, (“Information”), provided by contracting companies (“Clients”) and professionals registered on our platform (“Specialists”), who together will be called simply as “Users” or “You”).

As expressed in the Terms of Use, we do not allow anyone under 18 to use our Platform. (eighteen) years, so no data is collected from people in this condition.

I. Information collected when registering on the platform

1.1. In order to use the Platform and participate in Programs, the User will have to register at our Platform, at which time information will be provided, mainly identifying the User and fraud prevention.

1.2. When registering through the Platform, the User will provide various data, depending on the type of registration carried out, being:

    i. Experts: Full name; CPF; Surname; email; and password;     ii. Customers: Company name; CNPJ; Name of the person responsible for registration; email; It is password.

II. Information collected when browsing the platform and from other sources

2.1. When a User visits and browses our Platform, we may collect the following information:

    i. IP; User-Agent.

2.2. Without prejudice, we collect Information from various sources, including:

  • User profiles. When you create a profile, BugHunt may collect certain personal information, including your name, contact details, photographs, examples of your work, information about work previously carried out through the Platform and outside the Platform, skills and other information, including your username (“Profile”). Information in your profile may be visible for all BugHunt users and the general public.
  • Communications with us. We may collect personal information from you, such as your email address, phone number, telephone number or mailing address when you choose to request information about us Platform or Programs promoted by it, register for the BugHunt newsletter, request receiving technical or customer support or communicating with us.
  • Research. From time to time, we may contact you to participate in online surveys. If you decide to participate, you may be asked to provide certain information which may include personal information. All information collected through your participation in our surveys is provided by you voluntarily. We may use this information to improve our products, Platform and/or Customer Programs and in any manner consistent with the policies here provided.
  • Posting on the Platform. BugHunt may offer publicly accessible pages, blogs, messages private or community forums. You should be aware that when disclosing personal information on pages, blogs, private messages and forums of the BugHunt community, the Platform will collect the information provided in such submissions, including any personal information. If you choose to send content to any public area of the Platform, such content will be considered "public" and will not be subject to the privacy protections set forth in this document.
  • Automatic Data Collection. We may collect certain information automatically through our Platform or other web analytics methods such as IP (Internet Protocol) address, identifiers cookies, mobile carrier, mobile advertising identifiers, MAC address, IMEI, mobile ID advertiser and other device identifiers. automatically assigned to your computer or device when you access the Internet, browser type and language, location information geographic location, hardware type, operating system, Internet service provider, pages you visit before and after using the Platform, the date and time of your visit, the amount of time spent on each page, information about the links you click and the pages displayed on the Platform and other actions performed by using the Platform, such as preferences.
  • Cookies, pixel tags / web beacons and Analytics information. We, as well as third parties that provide content, advertising or other functionality on our Platform, we may use cookies, pixel tags, local storage and other technologies ("Technologies") to collect information automatically through the Platform. We use technologies that are essentially small files of data placed on your computer, tablet, cell phone or other devices (collectively referred to as as a "device") that allows us to record certain information whenever you visit or interacts with our websites, services, applications, messages and tools and to recognize you in all the devices.
  • Cookies. Cookies are small text files placed in users' device browsers. visitors to store their preferences. Most browsers allow you to block and delete Cookies. However, if you do so, the Platform may not function properly.
  • Embedded scripts. We and our marketing partners, affiliates, analytics and service providers services we may also employ software technology known as embedded scripting. A script embedded is programming code designed to collect information about your interactions with the Platform, such as the links you click. The code is temporarily downloaded to your computer or other device and is deactivated or deleted when you disconnect from the Platform.
  • Social media widgets. Our website includes social media features such as the Facebook "Like" button and LinkedIn (which may include widgets like this share button or other mini-programs interactive). These features may collect your IP address, which page you are visiting on our site, and may set a cookie to enable the feature to function properly. These features of social media are hosted by third parties or directly on our website. Your interactions with these Resources are governed by the privacy policy of the company that provides them.
  • Analytics. We may also use Google Analytics and Demographics and Information Reporting. interest of Google Analytics to collect information about visitor behavior and demographics of the visitor in some of our services and develop the content of the website. For more information about Google Analytics, visit www.google.com/policies/privacy/partners". You can choose not to collect and process Google data generated by your use of the Services at http://tools.google.com/dlpage/gaoptout.
  • Information sent through the Platform. You agree that BugHunt is free to use the content of any communications sent by you through the Platform, including any ideas, inventions, concepts, techniques or know-how disclosed herein, for any purpose, including developing, manufacturing and/or marketing goods or services. BugHunt will not disclose your name or publicize the fact that you submitted materials or other information to us unless: (a) you grant us permission to do so or otherwise it is necessary as part of the Platform and/or of the Programs, such as to facilitate payment to you as a Specialist; (b) we first notify you that materials or other information you send to a specific part of Plataorma will be published or used with your name; or (c) we are required to do so by law.
  • Information from other sources. We may receive information about you from other sources, including through third party services and organizations, to supplement the information provided by you. For example, if you access or use our Platform through a third-party application, we may collect information about you from that third-party application that is public through your privacy settings or is otherwise available. This additional information in allow us to verify the information you have provided to BugHunt and improve our ability to provide information about our business, products and services.

    • III. Use of collected information

    3.1. All data collected is treated by BugHunt in accordance with and for the purposes set out in this Policy, including:

        i. Registration and identification of Users on the Platform;
        ii. Identity confirmation and authorization to release payments;
        iii. General management of User information and accounts;     iv. Provision of services through the Platform;
        v. Adequate service to your requests and doubts;
        vi. Improving the use and browsing experience of our Platform and internal quality control;
        vii. Assessment of vulnerabilities and other bugs discovered during the use of the Platform and Customer Programs;
        viii. Interest development, statistics, studies, research and surveys relevant to the use of the Platform;
        ix. Communication to Users regarding changes to the Platform,
        x. Compliance with obligations arising from the law and assumed in the context of access and use of the Platform;
        xi. Administer, provide services and fulfill obligations arising from the use of our services and products;
        xii. Promote our services and products, inform about news, functionalities, content, news and promotions relevant to maintaining relationships with customers our Users;
        xiii. Protection of rights and obligations related to the use of our Platform;
        xiv. Prevention of fraud and potentially prohibited or illegal activities;
        xv. Collaboration and/or compliance with a court order or request by authority administrative;
        xvi. For the exercise and defense of any rights of BugHunt, at its discretion, including in the context of judicial or administrative proceedings;
        xvii. Collect and analyze data from third-party software, Google Analytics, for parameterization and creation of metrics; and
        xviii. Preparation of Vulnerability Reports with references and indications of the parties included in the process.

    3.2. BugHunt may use User data directly or by transferring it to our third-party service providers, for offering or sending Users information relating to products or services that may be of interest to such Users, by any available means, including electronic means, mail or telephone (SMS and others).

      3.2.1 Any data transferred to service providers will be processed by BugHunt's account and order, and it will take all reasonable measures to avoid any distortion of this purpose by its partners and collaborators.

    3.3. Users' email address and telephone number may also be used to send other types of communications, notifications and newsletters from BugHunt.

    IV. Data sharing

    4.1. The user understands and agrees that BugHunt, its partners and service providers may share and collect information about the user from external sources, to complement the registration and detect possible fraud.

    4.2. BugHunt uses third-party servers, such as Amazon Web Services (AWS) to store data. all data obtained, server located in the United States.

    4.3. The User declares to be aware that, due to legal obligation, BugHunt may be obliged to share personal data and data related to transactions carried out on the Platform with entities government and the Judiciary, without any prior communication being necessary or required to respect for the User himself.

    4.4. Furthermore, the necessary data will be made available to payment system operators, BugHunt employees and collaborators, as well as its partners and/or contractors, in Brazil or abroad outside, depending on the need for such access to provide services by the Platform.

    4.5. Additional information may be requested from the User if BugHunt deems it necessary to confirmation of the User's identity, and the User's access to the Platform may be restricted until Identity confirmed by BugHunt.

    V. Data protection and information security

    5.1. BugHunt uses physical and electronic systems, policies, procedures and technology that provide security to protect your information, in compliance with legislation and practices Marketplace. Data will be stored encrypted to ensure security and privacy of Users' personal data.

    5.2. The personal information of users and visitors will be collected and stored in accordance with strict confidentiality and security standards.

    5.3. The User account on the Platform is protected by a personal and non-transferable password, which exists for Users' privacy and security. The User must prevent unauthorized access to their account and your information by choosing and protecting your password appropriately, and limiting access to your computer or device and browser, and the User is responsible for properly disconnecting from the Platform after terminating its use.

      5.3.1. The password to access the User account on the Platform is stored in our databases data and, to guarantee its security, no one has access to such databases, so the User You must not provide it to anyone who requests it, even if that person identifies themselves as BugHunt employee/contributor.

    5.4. If a User has any reason to believe or suspect that any third party has had access your User account access password, you must contact our customer service center.

    5.5. We emphasize that BUGHUNT CANNOT GUARANTEE THE COMPLETE SECURITY OF DATA TRANSMITTED BY USERS TO THE PLATFORM VIA THE INTERNET, SINCE IT IS A MEDIUM OVER WHICH IT HAS NO CONTROL AND THAT IS SUBJECT TO SECURITY FAILURE INHERENT TO THE ACTIVITY. IN THIS REGARD, ANY TRANSFER OF DATA IS THE EXCLUSIVE RESPONSIBILITY OF THE USERS, WHO, BY AGREEING TO THIS POLICY, THEY EXPRESSLY ACKNOWLEDGE AND ASSUME SUCH RESPONSIBILITY.

    5.6. Once User Information is received by the Platform, we undertake to ensure that such information will be secure in the Platform environment. To prevent unauthorized access or disclosure authorized use of User data, we implement physical, electronic and appropriate administrative measures to ensure and protect the information we collect, ensuring that Software used is always updated to its most secure versions. All communication is encrypted and data is stored in our databases using the most current techniques security and information protection.

    5.7. BugHunt is not responsible for security breaches occurring on the User's device, computer, cell phone or tablet, whether they are faults arising from the presence of viruses, malware, spyware, phishing, keylogger, attack on the DNS server or DNS cache poisoning, among others, nor for damage or problems arising from delays, interruptions or blocking of data transmissions occurring in the internet.


    THE USER DECLARES TO BE AWARE THAT ALL COMMUNICATION THROUGH THE WORLDWIDE COMPUTER NETWORK IS SUBJECT INTERRUPTIONS OR DELAYS, WHICH MAY PREVENT OR IMPAIR THE SENDING OR RECEIVING OF DATA AND, THEREFORE, THE TRANSACTIONS, SO THATNO LIABILITY CAN BE ATTRIBUTED TO BUGHUNT FOR DAMAGES OTHER THAN ARISE OUT OF ITS STRICT ACTION AND CONTROL, NOR BEING RESPONSIBLE FOR FAILURE OF SERVICES PROVIDED BY THIRD PARTIES.

    VI. Third-party websites

    6.1. Throughout the use of the Platform, the User may have access to links to other websites and other websites. These other domains and sites are not controlled by us and Bughunt does not endorse nor does it make any representations about third-party websites or social media platforms. We encourage our users to read the privacy policies of all websites and applications with which they interact.

    VII. Cookies

    7.1. Cookies are small text files placed on visitors' device browsers to store your preferences. Most browsers allow you to block and delete cookies. At the However, if you do so, the Services may not function properly.

    7.2. We, as well as third parties that provide content, advertising or other functionality on our Services, we may use cookies, pixel tags, local storage and other technologies ("Technologies") to collect information automatically through the Services. We use technologies that are essentially small data files placed on your computer, tablet, cell phone or other devices (collectively referred to as a "device") that allow us to record certain information whenever you visit or interact with our websites, services, applications, messages and tools and to recognize you on all devices.

    7.3. You may stop or restrict the placement of the Technologies on your device or remove them by adjusting your preferences as your browser or device allows. Note that the Cookie-based opt-outs are not effective in mobile applications. However, you can choose to opt out of personalized ads in some mobile apps by following the instructions here: https://www.networkadvertising.org/mobile-choice

    VIII. Access and deletions of information

    8.1. Data obtained by BugHunt through the Platform will be deleted upon specific request from the User made through the service channels available on the Platform, with the User being aware, however, that due to express legal requirements and services provided on the Platform, some of your data will be kept by BugHunt for up to 10 (ten) years counted from the end of the relationship between us, in compliance with the provisions of Law 10.406/02 (Code Civil), and for at least 6 (six) months, under the terms of Law 12,965/2014 (Marco Civil da Internet), between other legal obligations imposed by other applicable standards.

    IX. Contact

    9.1. To have access to your data and be aware of the information made available to third parties, as well as requesting measures in relation to them, the User must enter into a contract with the BugHunt through the service channels available on our website.

    X. Changes

    10.1. BugHunt MAY MODIFY THIS PRIVACY POLICY AT ANY TIME, in which case the modifications will become valid for the User from the moment he agrees with the new conditions. Your acceptance of the terms after updating means that you have agreed to the changes to this Privacy Policy.

    10.2. If they do not agree with any modification of this Policy, the Platform User may reject it, without any burden. The rejection of the new version of the Policy, however, unfortunately, could imply the impossibility of offering services by BugHunt.