Privacy policy
Last revised 25 August 2026. Written to be read, not to be survived.
What this covers
This policy describes how Bounty Data, Inc. handles information collected through databounty.ai and through the claim and bounty process. It does not describe how we handle a licensed corpus after an engagement is signed — that is governed by the data processing agreement executed with each seller.
What we collect from this site
Contact details you enter into the claim: your name, role, work email, company name and website. Manifest details you enter: headcount band, systems in use, retention depth and any exclusions you note. Standard request logs, retained for 30 days for security and abuse purposes.
What we do not collect
We do not place advertising or cross-site tracking cookies. We do not sell or rent contact details. We do not request credentials, access tokens or connections to any of your systems in order to produce a bounty, and we never will.
How claim information is used
Solely to produce your written offer and to correspond with you about it. Manifest details are visible only to the bounty team assigned to your file. If you decline a bounty, your manifest is deleted on request and, absent a request, within twelve months.
Licensed corpora
A corpus acquired under a signed engagement runs through the redaction pipeline described in our security brief before it is treated as deliverable. Identifier mapping tables are destroyed on delivery confirmation and never form part of a transferred corpus. Licenses forbid resale, redistribution, syndication and publication.
Your rights
You may request access to, correction of, or deletion of any information you have given us, at any time, by writing to security@databounty.ai. Requests are answered within 30 days. Where GDPR or comparable regimes apply, the rights of access, rectification, erasure, restriction, portability and objection apply in full.
Sub-processors
Infrastructure, email and analytics providers used to operate this site and the bounty process are named in the data processing agreement issued before any engagement is signed. Additions require written notice.
Changes
Material changes to this policy are posted here with a revised date. Continued use of the site after a change constitutes acceptance of the revised policy.
This page is a plain-language summary intended for review, not a substitute for counsel. Questions to security@databounty.ai.