Bugbop Terms & Conditions

1. Definitions

• "Platform" refers to Bugbop, including its website, services, and related tools.
• "User" refers to any individual or entity that registers for or uses Bugbop, including bug hunters and organizations.
• "Bug Hunter" refers to individuals or teams that participate in bug bounty programs by reporting security vulnerabilities.
• "Organization" refers to entities that create and manage bug bounty programs on Bugbop.
• "Bug Report" refers to any vulnerability report submitted by a Bug Hunter.

2. Eligibility & Accounts

2.1 Eligibility

You must be at least 18 years old to use Bugbop. By using Bugbop, you represent that you have the legal capacity to enter into these Terms.

2.2 Account Registration

• Users must provide accurate and complete registration information.
• Each User is responsible for maintaining the security of their account credentials.
• Bugbop reserves the right to suspend or terminate accounts for violations of these Terms.

3. Platform Usage

3.1 Bug Hunter Conduct

• Bug Hunters must adhere to ethical hacking principles and comply with applicable laws.
• Unauthorized testing or exploitation of vulnerabilities outside of approved programs is strictly prohibited.
• Bug Reports must be original, valid, and not previously disclosed.

4. Bug Report Process

4.1 Bug Reports

• Bug Hunters submit reports through Bugbop’s platform.
• Organizations review and validate reports.
• Organizations determine eligibility for rewards based on program criteria.

5. Third-Party Triagers

Organizations may appoint third-party triagers to review Bug Hunters' reports to assist in validation and categorization. Triagers are strictly prohibited from:

• Using or exploiting any bug reports for personal or unauthorized purposes.
• Disclosing, sharing, or selling any vulnerability details outside the approved Bugbop process.
• Submitting a discovered vulnerability under their own name instead of crediting the original Bug Hunter.
• Engaging in conflicts of interest that compromise the integrity of the platform.

Violations of these terms may result in immediate termination of access and legal action.

6. Fees & Payments

Bugbop may charge service fees to organizations for platform usage. Bug Hunters and organizations are responsible for any applicable taxes.

6.1 Payment Restrictions

Bugbop is an Australian company and must comply with all applicable Australian and international laws regarding payments to individuals and entities. As such, we are unable to process payments to certain sanctioned countries or regions (e.g., North Korea) where such transactions are prohibited by law.

We also cannot pay any individual or entity named on the Australian Government's Consolidated List of sanctioned persons and entities, or anyone acting on their behalf. This applies to every payout method, including cryptocurrency.

6.2 Alternative Compensation

If you're in a region we can't legally pay, and you'd still like your work to make an impact, we're happy to donate your bounty amount to a registered global charity of your choice, subject to legal review. Please contact our support team to arrange this alternative. This option is not available to individuals or entities on the Consolidated List, or anyone acting on their behalf.

6.3 Identity Verification

As part of our commitment to security and regulatory compliance, Bugbop may require users to complete identity verification before receiving payments. By using our platform, you acknowledge and agree that:

• We may collect and verify personal information including but not limited to government-issued identification, proof of address, and tax information.
• Your identity verification information may be shared with trusted third-party verification services to confirm your identity and comply with applicable regulations.
• We may be required by law to disclose your information to regulatory authorities, law enforcement agencies, or other third parties, including but not limited to:
  • When compelled by court orders, subpoenas, or other legal processes
  • If we have reasonable grounds to suspect that a crime or fraudulent activity has been, is being, or may be committed
  • To prevent or investigate potential violations of our terms or policies
  • To comply with financial regulations and reporting requirements
  • Upon your request
• We implement appropriate security measures to protect your personal information, but cannot guarantee absolute security of data transmission over the internet.

6.4 Refunds

Unspent wallet balances may be refunded upon request, subject to our fair use policy:

• Refunds will not be provided for Programs where in-scope Bug Reports have been submitted but not yet compensated.
• If in-scope bugs were found during a program, they must be awarded according to the program's terms before any refund request can be processed.
• Bugbop reserves the right to deny refund requests in cases of suspected abuse or attempts to avoid paying for work already performed by researchers.

6.5 Payouts

Bug Hunters request payouts from the email address on their Bugbop account. A payout sent to the account, wallet or other details you give us settles that amount, and Bugbop is not responsible for funds lost because those details were wrong. Cryptocurrency payouts cannot be reversed. For cryptocurrency payouts, Bugbop pays the withdrawal fee and sends an amount worth the USD you are owed at the exchange's price when we buy it.

6.6 Withholding Payouts

Bugbop may withhold any payout, including bounties already awarded, to a Bug Hunter who has been banned from Bugbop and then creates or uses another account to get around that ban. Bugbop may do the same where an account is used to evade a program block or a suspension.

7. Liability & Disclaimers

Bugbop provides its platform "as is" without warranties. Bugbop is not liable for any damages resulting from platform usage.

8. Termination & Suspension

Bugbop may suspend or terminate accounts for violations of these Terms.

8.1 Repeated Abuse and Ban Evasion

Submitting the same bug more than once, or submitting reports after the AI scope check has warned that they are out of scope, can lead to a block from a program. Repeated violations will result in a permanent ban from Bugbop. A banned person may not create or use another account. Doing so is a violation of these Terms, and Bugbop may close the new account and withhold payouts as set out in section 6.6.

8.2 Program Suspension

Bugbop reserves the right to suspend any program that we determine is:

• Not genuine or operating in bad faith
• Not behaving honorably toward security researchers
• Not being actively monitored

Our platform's success depends on maintaining trust between companies and the security research community. Programs that undermine this trust or fail to uphold the standards of our platform may be suspended at Bugbop's sole discretion.

9. Governing Law & Dispute Resolution

These Terms are governed by the laws of Victoria, Australia. Disputes shall be resolved through arbitration in Melbourne, Australia, unless prohibited by law.

10. Amendments & Updates

Bugbop may update these Terms from time to time. Users will be notified of significant changes and continued use constitutes acceptance.

11. Contact Information

For questions regarding these Terms, please contact [email protected].