~/bountydesk

Privacy Policy

Last updated: May 30, 2026

This Privacy Policy explains how BountyDesk (the “Service”), operated by Kushagra Kartikey, a sole proprietor based in Bihar, India (“we”, “us”, or “our”), collects, uses, and protects your information when you use https://bountydesk.vercel.app.

1. Information we collect

We collect the following categories of information:

  • Account information: your email address and authentication details, which you provide when you sign up.
  • Content you create: the data you enter into the Service, such as bug bounty programs, submissions, statuses, payout amounts, and report drafts.
  • Technical information: basic usage and device data, such as log information needed to operate and secure the Service.
  • Payment information: when you subscribe to a paid plan, payment details are collected and processed directly by Paddle, our Merchant of Record. We do not receive or store your full card details.

2. How we use your information

We use your information to provide and maintain the Service, authenticate your account, process subscriptions, respond to support requests, and improve and secure the Service. We do not sell your personal information.

3. Service providers

We rely on a small number of trusted providers to operate the Service:

  • Supabase — database, authentication, and hosting of your account and content data.
  • Vercel — application hosting and delivery.
  • Paddle — payment processing and billing as Merchant of Record.

These providers process data on our behalf and are bound by their own privacy and security obligations.

4. Cookies

We use strictly necessary cookies to keep you signed in and to operate the Service. We do not use advertising cookies.

5. Data retention

We retain your information for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within a reasonable period, except where we are required to retain it to comply with legal obligations.

6. Security

We take reasonable technical and organizational measures to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your rights

Depending on your location, you may have the right to access, correct, or delete your personal data, or to object to or restrict certain processing. To exercise these rights, contact us using the details below.

8. International transfers

Your information may be processed and stored in countries other than your own. Where this happens, we take steps to ensure your data continues to receive appropriate protection.

9. Children

The Service is not directed at children and is intended for users who are at least 18 years old. We do not knowingly collect personal data from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will update the “Last updated” date above when we do.

11. Contact

For privacy questions or requests, contact us at kushagra832005@gmail.com.