Bugbop Privacy Policy

Effective Date: 1st January 2025 | Last Updated: 6th May 2025

This Privacy Policy explains how Bugbop, owned and operated by Ponny Pty Ltd (ABN: 72 682 690 866), collects, uses, and safeguards your personal information. We are committed to protecting your privacy and ensuring transparency in our data practices.

1. Information We Collect

1.1 Account Information

When you register for Bugbop, we collect:

  • Name and email address
  • Username and password
  • IP address at the time of registration
  • Profile information (optional)
  • Payment information when applicable (stored securely through our payment processors)

1.2 Usage Data

We collect information about how you interact with our platform:

  • Bug Reports submitted and their content
  • Program participation history
  • Comments and communications within the platform
  • Log data including IP address, browser type, pages visited, and time spent

2. How We Use Your Information

We use your information to:

  • Provide and improve Bugbop services
  • Process Bug Reports and facilitate communication between Bug Hunters and organizations
  • Process payments and manage accounts
  • Send important notifications about your account or Bug Bounty Programs
  • Analyze platform usage to improve features and user experience
  • Prevent fraud and enforce our Terms & Conditions
  • Review Programs and Bug Reports for moderation, policy compliance, and quality assurance
  • Provide technical support and resolve disputes between users

3. Data Sharing and Disclosure

We may share your information with:

  • Program Owners: Bug Reports and related communications are shared with the organization that owns the Bug Bounty Program.
  • Service Providers: We use trusted third parties for services like payment processing, email delivery, and analytics.
  • Legal Requirements: We may disclose information when required by law or to protect our rights, privacy, safety, or property.

We do not sell your personal information to third parties.

4. Data Security

We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

5. Content Moderation and Platform Integrity

To maintain the integrity of our platform and ensure compliance with our policies, Bugbop reserves the right to:

  • Review Program descriptions, scope documents, and other public-facing content
  • Access and review Bug Reports and related communications when necessary to investigate potential misuse
  • Monitor unusual activity patterns that may indicate fraudulent or abusive behavior
  • Assist with technical support inquiries by examining specific Program or report data with your permission
  • Moderate content that may violate our Terms & Conditions or community standards

This oversight helps us maintain a trustworthy platform while protecting both Bug Hunters and organizations from potential misuse or policy violations.

6. Your Rights and Choices

Depending on your location, you may have rights regarding your personal information, including:

  • Accessing, correcting, or deleting your personal information
  • Objecting to or restricting certain processing activities
  • Data portability
  • Withdrawing consent where processing is based on consent

To exercise these rights, please contact us at [email protected].

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our platform. You can control cookie settings through your browser preferences.

8. International Data Transfers

Bugbop is based in Australia, but our services may involve transferring and storing your data in other countries. We ensure appropriate safeguards are in place to protect your information in compliance with applicable laws.

9. Children's Privacy

Bugbop is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on our website and, where appropriate, by email.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at [email protected].