THESE TERMS OF SERVICES IS AN ELECTRONIC RECORD IN THE FORM OF AN ELECTRONIC CONTRACT FORMED UNDER APPLICABLE LAWS AND THE PROVISIONS PERTAINING TO ELECTRONIC DOCUMENTS / RECORDS IN VARIOUS STATUTES. THIS TERMS OF SERVICE DOES NOT REQUIRE ANY PHYSICAL, ELECTRONIC OR DIGITAL SIGNATURE.
PLEASE READ THIS TERMS OF SERVICE CAREFULLY. BY USING THE PLATFORM, YOU INDICATE THAT YOU UNDERSTAND, AGREE AND CONSENT TO THIS TERMS OF SERVICE. IF YOU DO NOT AGREE WITH THE TERMS OF THESE TERMS OF SERVICE, PLEASE DO NOT USE THE PLATFORM OR SERVICES.
This Terms of Service of the website located at the URL https://bugbase.ai/, and other associated/ancillary applications, products, websites and services and all other variations and sub-domains of the same (collectively referred to as “Platform”) is between BugBase PTE LTE an affiliate of BugBase Security Private Limited, a company incorporated under the Companies Act, 2013 with its registered office situated at B-10 Green Park Extension Delhi South Delhi -110016 (referred as Company or “we” or “us” or“our"), and the registered Users, defined to include any person who registers himself/herself/itself on the Platform and holds an Account on the Platform or a visitor on the Platform, as the case may be (referred as"you" or "your" or “User”). These Terms and Conditions describe the terms on which Company offers Services.
These Terms and Conditions are a contract between you and the Company. This Terms of Service shall be read together with the Privacy Policy available on https://bugbase.ai/privacy or other terms and condition with all other notices, disclaimers, guidelines appearing on the Platform from time to time (collectively referred to as "Terms and Conditions") constitute the entire agreement upon which you are allowed to access and use the Platform and avail the Services. By accessing the Platform, you are agreeing to be bound by these Terms and Conditions, all applicable laws and regulations, and agree that you are responsible for compliance with any applicable local laws. Your continued use of the Platform shall constitute your acceptance to the Terms and Conditions, as revised from time to time.
You and the Company shall hereinafter be individually referred to as a “Party” and collectively as the “Parties”
Before using certain areas of the Platform you may be asked to indicate your acceptance of additional special terms and conditions by clicking a button marked "I Accept" "I Agree" "Okay" "I Consent" or other words or actions that similarly acknowledge your consent or acceptance of a Click-Through Terms and Conditions or you may indicate your acceptance by executing an order form issued by the Company. Any consent so provided by you will be deemed to be valid consent under all applicable laws.
Your use of the Platform is subject to the Terms and Conditions, which may be updated, amended, modified, or revised by us from time to time. To ensure that you are aware of any additions, revisions, amendments, or modifications that we may have made to these Terms and Conditions, it is important for you to refer to the Terms and Conditions from time to time. The updated Terms and Conditions shall be effective immediately and shall supersede these. We shall not be under an obligation to notify you of any changes to the Terms and Conditions. You shall be solely responsible for reviewing the Terms and Conditions from time to time for any modifications. If you continue to use the Platform and/or Services after the updated Terms and Conditions have been published, it shall be deemed that you have read and understood and accept the updated Terms and Conditions. Any reference to Terms of Service herein shall refer to the latest version of the Terms of Service.
1. For Customers
BugBase helps you host various crowdsourced security operations in one comprehensive dashboard where you can track, identify and mitigate vulnerabilities with ease.
The following types of programs can be hosted on the Platform:
2. For Bounty Hunter
Your role on the Platform is that of a bounty hunter, security researcher, or anyone who is willing to help companies and other organizations find bugs and vulnerabilities in their technology. We will put in our best effort to ensure and protect the interest of the Bounty Hunter.
We urge that you try to adhere to these terms and conditions and the Vulnerability Disclosure Guidelines to the maximum extent possible, this is to ensure that we will be in a position to assist and support you to the maximum extent possible in the event of a difficult disclosure situation that escalates.
As a Bounty Hunter, you may be required to comply with some additional terms and conditions as set out here https://bugbase.ai/privacy and for further information, you may refer to Welcome to BugBase Docs - BugBase Docs.
It is hereby clarified that the term "you" or "your" or “User” could mean the Customer or the Hacker or both, as the case may be.
3. Bug Bounty Offering
The following process flow is applicable in the event you chose to avail the Vulnerability Disclosure Program, the Bug Bounty Program or the Private Bounty Program, as the case may be.
The Company offers a Platform that connects the Customers with Bounty Hunters to promote bug identification and facilitate payments. Once the Customer registers an Account on the Platform, they can initiate the creation of a Bounty Program. The Customer shall be solely responsible for the Program Policy, the Company may assist the Customer in creating the Bounty Program and drafting the Program Policy.
The Customer’s Bounty Program will be listed on the Platform along with various other Bounty Programs hosted by other Users or be shared with the Bounty Hunter via an invite, as the case may be. Except as may be agreed by the parties, Customer is solely responsible for the management and administration of Customer's Bounty Programs. By making any content regarding a Bounty Program available through the Services, Customer hereby grants to the Company a perpetual, irrevocable, non-exclusive, non-transferable, non-sublicenseable, worldwide, royalty-free license to use, copy, reproduce, display, modify, adapt, transmit and distribute copies of the details of the Bounty Program, for the sole purpose of providing the Services. The Company reserves the right to reject a Bounty Program for any reason in its sole discretion. The Bounty Program will be launched on a date decided mutually between the Customer and the Company.
The Bounty Hunter may browse through the available Bounty Programs and join a bounty program hosted by a Customer and start the Testing Services on the Customer Systems, while strictly adhering to and following the rules and scope decided by the Customer.
Once the Bounty Hunter identifies a bug in the Customer Systems during the Testing Service, it will be reported to the Company in the form of a New Report. Out of scope findings cannot be submitted as a part of the New Report, the Bounty Hunter is instructed to stay within the parameters of the Program Policy unless expressly stated otherwise in the Program Policy.
For a Managed Program, The Company shall check the bug validity and authenticity, and thereafter mark it as "triaged" meaning a valid bug or duplicate or rejected (with reason).
The Company would share the bug with the Customer and the Customer shall have access to the Triaged Report sent by Bounty Hunter.
Disclaimer: The Triaged Report will only be prepared and shared with the Customer for the Managed Program. For the unmanaged Vulnerability Disclosure Programs the New Reports will be directly submitted to the Customer.
The Customer and the Bounty Hunter shall be permitted to chat with each other on the Platform until the bug is resolved/ handled to the satisfaction of the Customer as per the Bounty Program.
The Customer shall acknowledge as to whether the identified bug has been fixed or not and mark the bug status accordingly on the Platform, and the Company will then make the payment of the Bounty in accordance with the terms of the Bounty Program to the concerned Bounty Hunters involved. The pay outs will be made as per terms and conditions set out herein.
“Bounty Hunter” means a User who has registered on the Platform for rendering Testing Services in furtherance to Bounty Programs.
“Bounty Program” means a brief of all details regarding the Customer’s requirement from the Bounty Hunter (in scope websites/apps, out of scope websites/apps, program rules, Bounty details, Bounty amounts, etc).
“Bounty” means the consideration agreed to be paid by the Company to the Bounty Hunter against the Testing Services rendered. It is clarified that monetary Bounties will not be applicable in case of Vulnerability Disclosure Programs (including managed Vulnerability Disclosure Programs).
“Customer Systems” shall mean the systems, applications and such other mechanism on which the Testing Services are being applied.
“Customer” means a User who has registered on the website for getting the security issues/ loopholes/ other issues etc. in the Customer Systems tested. The Customer in furtherance to these Terms and Conditions acknowledges that the Bounty Hunters registered with Bug Base shall test vulnerabilities in their software, portals etc. to prevent data breach/thefts and to secure their servers.
“Managed Program” means either a Vulnerability Disclosure Program or a Bug Bounty Program or a Private Bounty Program where the Company is responsible for managing the triage of New Reports.
“New Report” means the report created by the Bounty Hunter that contains details of a bug that is discovered and is submitted to the Company as an official submission pursuant to any Bounty Program.
“Testing Services” means the services performed by Bounty Hunters and includes, but is not limited to, the vulnerability testing services and next generation penetration testing services performed by Bounty Hunters pursuant to the Bounty Program posted by the Customer on the Platform.
“Triaged Report” means a report submitted by the Company to the Customer which has been acknowledged by the Company/ triager as a report containing the details of a unique and valid bug. The Triaged Report may contain the details from a single Bounty Hunter’s New Report or may be a collaboration of the New Reports of multiple Bounty Hunter.
a) By using the Platform, you affirm that you are fully able and competent to accept the Terms and Conditions and the obligations, affirmations, representations, warranties set forth in the Terms and Conditions, and to abide by and comply with the terms stated therein. Registration of User in the Platform is available only to persons who can form legally binding contracts. Persons who are "incompetent to contract" including un-discharged insolvents, or person with unsound mind etc. are not eligible to use the Platform. Provided, a minor/child (below the age of 18 years) may register on the Platform in the manner specified below.
b) You must register an account on the Platform (an “Account”). When you register on the Platform and set up your Account, you must: (i) provide accurate and complete information; (ii) promptly update your Account information with any new information that may affect the operation of your Account; (iii) authorize Company to make any inquiries we consider necessary or appropriate to verify your Account information or the information you provide to us via the Platform including document proofs or copies or any such information as required mandatorily by applicable law that need to be provided to us; and (iv) acknowledge and accept any applicable policies, including but not limited to those pertaining to service quality, confidentiality, User integrity, anti-harassment and conflict of interest. You will not use false identities or impersonate any other person or use another account that you are not authorized to use on any computer, mobile phone, tablet, or other device (collectively “Device”).
c) You are responsible for safeguarding and maintaining the confidentiality of your Account information. You agree not to disclose your Account information to any third party and that you are entirely and solely responsible for any and all activities or actions that occur pursuant to the use of your Account on the Platform, whether or not you have authorized such activities or actions. You will immediately notify Company of any unauthorized use of your Account. You may be held liable for losses incurred by Company due to authorized or unauthorized use of your Account as a result of your failure in keeping your Account Information secure and confidential.
d) If you provide any information that is untrue, inaccurate, not current or incomplete (or becomes untrue, inaccurate, not current or incomplete), or Company has reasonable grounds to suspect that such information is untrue, inaccurate, not current or incomplete, Company has the right to suspend or terminate your Account and refuse any and all current or future use of the Platform / Services (or any portion thereof).
e) If you are a Customer (Applicable to Users availing the Enterprise Plan):
When you sign up for an Account for your organization you may specify one or more administrators (“Admin”). The Admin will have the right to configure the Services based on your requirements and manage end users in your organization account. If your Account is created and configured on your behalf by a third party, it is likely that such third party has assumed Admin role for your organization. Make sure that you enter into a suitable agreement with such third party specifying such party’s roles and restrictions as an Admin of your Account. You are responsible for taking necessary steps for ensuring that your organization does not lose control of the Admin accounts. You may specify a process to be followed for recovering control in the event of such loss of control of the administrator accounts by sending an email to [email protected], provided that the process is acceptable to the Company. In the absence of any specified Admin account recovery process, the Company may provide control of an Admin account to an individual providing proof satisfactory to the Company demonstrating authorization to act on behalf of the organization. You agree not to hold the Company liable for the consequences of any action taken by the Company in good faith in this regard.
f) If you are Bounty Hunter below the age of 18:
You may register an Account on the Platform with the consent of your parent or guardian. The Company has a separate registration mechanism for children below the age of 18 who wish to register on the Platform, this registration process ensures that the parent/guardian’s verifiable consent is obtained when registering on the Platform.
If you are a child, you will be required to also provide your parent/guardian’s email ID. This will trigger an email to your parent/guardian’s containing a ‘magic link’. For the successful creation of the account, your parent/guardian give consent by clicking on the link shared on the email. The parent/guardian will have complete access and control over the Account including the right to delete the Account at their sole discretion. If you are a parent/guardian and have observed that your child has created an Account without your consent, please reach out to us at [email protected], we assure you that we will take all steps necessary to delete the account and all information that we may have regarding the Account.
a) Subject to your compliance with these Terms, Company grants you a limited, non-exclusive, non-transferable license: (i) to view, download and print any content of Platform solely for their internal purposes; and (ii) to access, modify, edit and download any content, to which you are permitted access solely for your use. You have no right to sublicense the license rights granted herein.
b) You will not use, copy, adapt, modify, prepare derivative works based upon, distribute, license, sell, transfer, publicly display, publicly perform, transmit, stream, broadcast or otherwise exploit the Platform and Services, except as expressly permitted in the Terms. No licenses or rights are granted to you by implication or otherwise under any Intellectual Property Rights owned or controlled by Company or its licensors, except for the licenses and rights expressly granted in the Terms. The Platform and the Intellectual Property Rights vested therein is owned by Company.
c) You agree that this Platform and its Services are made available to you on a non-exclusive, non-transferable, non- sublicensable and on a limited license basis and hence, you will not permit, enable, introduce or facilitate other persons to participate in availing Services from your Account, including others who may be subject to an agreement that is the same or similar to this Terms and Conditions.
If you are a Customer: The Fees and Pricing plans are set out in the Customer Terms and Conditions available here https://bugbase.ai/customer-terms.
If you are a Bounty Hunter: The Fees and Pricing plans are set out in the Bounty Hunter Terms and Conditions available here https://bugbase.ai/bounty-hunter-terms.
There will be no refund of the Subscription Fee, Commission or any Bounty that is paid by the Customer. All payments made on the Platform or for availing the Services or Testing Services will be non-refundable.
The User agrees to keep all technical and non-technical information, which Company may have acquired before or after the date of this Terms and Conditions in relation to the technology, customers, business, operations, financial conditions, assets or affairs of the other Party resulting from negotiating this Terms and Conditions; or exercising its rights or performing its obligations under this Terms and Conditions; or which relates to the contents of this Terms and Conditions (or any agreement or arrangement entered into pursuant to this Terms and Conditions), including but not limited to business plans, business forecasts, research, technology and financial information, procurement requirements, purchasing requirements, manufacturing, customer lists, sales and merchandising efforts, marketing plans, experimental work, development, design details, specifications, engineering, copyrights, trade secrets, proprietary information, know-how, processes, equipment, algorithms, software programs, software source documents, and information in any way related to the current, future and proposed business, products and Services of Company confidential or any other information designated as confidential from time to time.
Notwithstanding anything in the foregoing to the contrary, confidential information shall not include information which: (i) was known by the User prior to receiving the confidential information from Company; (b) becomes rightfully known to the User from a third-party source not known (after diligent inquiry) by the User to be under an obligation to Company to maintain confidentiality; (c) is or becomes publicly available through no fault of or failure to act by the User in breach of this Terms and Conditions; (d) is required to be disclosed in a judicial or administrative proceeding, or is otherwise requested or required to be disclosed by law or regulation.
The Bounty Hunter agrees that the existence of a bug and the identification of said bug would be deemed to be Confidential Information, so would all interactions between the Customer and the Bounty Hunter. The Customer has the discretion to determine if the details of the bug are to be disclosed to the public or not.
Users shall be prohibited from carrying out the any illegal acts in the Platform including but not limited to acts mentioned below:
The Company shall, upon obtaining knowledge by itself or been brought to actual knowledge by an affected person in writing or through email signed with electronic signature about any such information as mentioned above, be entitled to disable such information that is in contravention of this Clause. We shall also be entitled to preserve such information and associated records for at least 90 (ninety) days for production to governmental authorities for investigation purposes. In case of non-compliance with any applicable laws, rules or regulations, or the Terms and Conditions including the Privacy Policy) by a User, we shall have the right to immediately terminate your access or usage rights to the Platform and Services and to remove non-compliant information from the Platform.
We may disclose or transfer User-generated information to our affiliates or governmental authorities in such manner as permitted or required by applicable law, and you hereby consent to such transfer. In accordance with the applicable laws, we shall transfer Information, to any other body corporate or a person in India, or located in any other country, that ensures the same level of data protection that is adhered to by us, only if such transfer is necessary for the performance of the lawful contract between Company or any person on its behalf and the User or where the User has consented to data transfer.
You agree that we may contact you through telephone, email, SMS, or any other means of communication for the purpose of:
You shall defend, indemnify, and hold harmless the Company, its affiliates/subsidiaries/joint venture partners and each of its, and its affiliates’/subsidiaries/joint venture partners’ employees, contractors, directors, suppliers and representatives from all liabilities, losses, claims, and expenses, including reasonable attorneys’ fees, that arise from or relate to (i) your use or misuse of, or access to, the Services and Platform; or (ii) your violation of the Terms and Conditions; or any applicable law, contract, policy, regulation or other obligation. We reserve the right to assume the exclusive defense and control of any matter otherwise subject to indemnification by you, in which event you will assist and cooperate with us in connection therewith.
TO THE FULLEST EXTENT PERMITTED UNDER LAW, IN NO EVENT SHALL COMPANY BE LIABLE WHETHER IN TORT (INCLUDING FOR NEGLIGENCE OR BREACH OF STATUTORY DUTY), CONTRACT, MISREPRESENTATION, RESTITUTION OR OTHERWISE FOR (I) ANY SPECIAL, INCIDENTAL, INDIRECT OR CONSEQUENTIAL OR OTHER SUCH LOSS OR DAMAGE, INCLUDING BUT NOT LIMITED TO THOSE SUCH AS AND/OR RESULTING FROM LOSS OF PROFITS, LOSS OF BUSINESS, BUSINESS INTERRUPTION, COMPUTER FAILURE, LOSS OF BUSINESS INFORMATION, DEPLETION OF GOODWILL, LOSS OR CORRUPTION OF DATA OR INFORMATION, PURE ECONOMIC LOSS AND/OR SIMILAR LOSSES OR DAMAGES OF ANY KIND, HOWSOEVER ARISING IN CONNECTION WITH THESE TERMS, (II) FOR YOUR RELIANCE ON THE SERVICES (III) FOR ANY DIRECT DAMAGES THAT EXCEED Rs. 10,000/- (IV) FOR ANY MATTER BEYOND ITS OR THEIR REASONABLE CONTROL, EVEN IF USER HAS BEEN INFORMED IN ADVANCE OF THE POSSIBILITY OF SUCH DAMAGES. THE LIMITATIONS OF THIS SECTION WILL NOT APPLY TO ANY LIABILITY THAT CANNOT BE EXCLUDED OR LIMITED BY LAW.
Our licensors and service providers will have no liability of any kind under these Terms and Conditions. Unless such restriction is prohibited by applicable law, you may not bring any claim under these Terms and Conditions more than twelve (12) months after the cause of action arises.
You further agree and confirm that Company shall not be responsible, in any manner whatsoever, for any delay/unavailability of Services or failure to meet its obligations under the Terms and Conditions, which may be caused, directly or indirectly, due to:
We reserve the right, at Our sole discretion, to change, modify, add or remove portions of these Terms of Services, at any time without any prior written notice to you. We suggest that you regularly check these Terms of Services to apprise yourself of any updates. Your continued use of the Platform following the posting of changes will mean that you accept and agree to the revisions. As long as you comply with these Terms of Services, we grant you a personal, non-exclusive, non-transferable, limited privilege to enter and use the Platform.
If any of these terms should be determined to be illegal, invalid or otherwise unenforceable by reason of the laws of any state in which these terms are intended to be effective, then to the extent and within the jurisdiction which that term is illegal, invalid or unenforceable, it shall be severed and deleted and the remaining Terms of Services shall survive, remain in full force and effect and continue to be binding and enforceable. III. The failure of either party to exercise in any respect any right provided for herein shall not be deemed a waiver of any further rights hereunder.
If the performance of the Party’s obligations hereunder is prevented, restricted or interfered with by reason of fire, or by epidemic or pandemic, or other casualty or accident; strike or labour disputes; war or other violence; or any act or condition beyond the reasonable control of the Parties, or an act of God (each a “Force Majeure Event”), then the Parties shall be excused from such performance to the extent of such prevention, restriction or interference; provided, however, that the Parties shall give prompt notice within a period of three (3) days from the date of occurrence of the Force Majeure Event and providing a description to the other Party of such Force Majeure Event in such notice, including a description, in reasonable specificity, of the cause of the Force Majeure Event and the likely duration of the impact or delay cause by the Force Majeure Event; and provided further that the Parties shall use reasonable efforts to avoid or remove such cause of non-performance and shall continue performance hereunder whenever such causes are removed.
If the Party’s performance of its obligations under this Terms and Conditions is suspended due to the occurrence of a Force Majeure Event for a period in excess of thirty (30) business days, the Parties may defer the performance of Services till such period and in such manner as mutually agreed between the Parties.
Nothing in this Terms and Conditions shall be construed to create any relationship between Company and you other than that of a service provider and user. you do not have the authority to bind Company in any manner whatsoever.
These Terms and Conditions are personal to you and you shall not assign or transfer or purport to assign or transfer the contract between you and us to any other person.
These Terms of Use are governed by the laws of India. Any action, suit, or other legal proceeding, which is commenced to resolve any matter arising under or relating to this website, shall be subject to the jurisdiction of the courts at New Delhi, India.
The Terms and Conditions are the entire agreement and understanding between you and Company with respect to the Services and usage of Platform.
In furtherance of the Information Technology Act, 2000 (“IT Act”) and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 (“Intermediary Guidelines”) a grievance officer is appointed to ensure compliance with the IT Act and the Intermediary guidelines.
Any discrepancies or grievances with regard to content and or comment or breach of the Terms of Service shall be taken up with the designated grievance officer as mentioned below in writing or through email signed with the electronic signature to:
Any discrepancies or grievances with regard to content and or comment or breach of the Terms and Conditions shall be taken up with the designated grievance officer as mentioned below via in writing or through email signed with the electronic signature to:
Name: Kathan Desai
Address: 2/3, 2 nd Floor, Sony World Signal, Kormangala 4 th Block- 560034, Bangalore, India
Phone: +91 88265 23484
Email: [email protected]
The grievance officer shall revert to every complaint within 24 hours of receipt of the complaint. Further, the Company shall take best possible efforts to redress the complaint within 15 days of receipt of the complaint. Any suggestions by Company regarding use of the Services shall not be construed as a warranty.
The Company offers an email, calling and in-app-based support system. In case you require any assistance or support, you may access support resources or contact our support by calling at +91 8826523484 or use the “Help and Support” function on the Platform or email at [email protected] .The Company provides Support on Monday – Friday between the hours of 10 a.m. – 6:30 p.m. IST (except public holidays).
The User agrees and acknowledges that the Company shall address and attempt to resolve the complaint received in accordance with the standard policies and procedures adopted by the Company, the User’s disapproval/discontent with the outcome/mode of redressal shall not be deemed to mean non-redressal of the complaint by the Company. Any suggestions by Company regarding use of the Service shall not be construed as a warranty.
In furtherance of the Consumer Protection Act 2019 (“Consumer Protection Act”) and the Consumer Protection (E- Commerce) Rules 2020 (“E-Commerce Rules”) a nodal officer is appointed to ensure compliance with the Consumer Protection Act and the E-Commerce Rules.
The details of the grievance officer to which consumer grievances can be redressed are as follows;
Name: Kathan Desai
Address: 2/3, 2 nd Floor, Sony World Signal, Kormangala 4 th Block- 560034, Bangalore, India
Phone: +91 88265 23484
Email: [email protected]
The Company shall revert to every complaint within 48 hours of receipt of the complaint. Further, the Company shall take best possible efforts to redress the complaint within 30 days of receipt of the complaint. Any suggestions by Company regarding use of the Services shall not be construed as a warranty.
The User agrees and acknowledges that the Company shall address and attempt to resolve the complaint received in accordance with the standard policies and procedures adopted by the Company, the User’s disapproval/discontent with the outcome/mode of redressal shall not be deemed to mean non-redressal of the complaint by the Company. Any suggestions by Company regarding use of the Service shall not be construed as a warranty.
If you have any questions regarding the Services or usage of the Platform, please contact Company at [email protected]. Please note that for the purpose of validation, you shall be required to provide information (including, but not limited to contact number or registered mobile number, etc.) for the purpose of validation and taking your service request.