Bug hunting terms & conditions

These Terms govern participation in the Altery Bug Hunting Program. Please read them carefully. For any questions, contact us at [email protected].

1. Definitions and interpretation

1.1 The Altery Bug Hunting Program is organised by Altery Ltd, a limited company incorporated in England and Wales with registered number 06984177, whose registered office is at Office 24, HGS 24, One Canada Square, London, United Kingdom, E14 5AB. We are authorised by the Financial Conduct Authority (FCA) under the Electronic Money Regulations for the issuing of electronic money and the provision of payment services under Firm Reference Number 901037. We trade under the name of Altery.

1.2 By participating in this Program, you agree to comply with these Terms and Conditions.

1.3 You can:
– get a current version of these Terms in the legal documents section of our Website; or
– contact us (see paragraph 12) and ask us to send you a copy of the current Terms.

1.4 In these Terms the following words have the meaning set out below:
Altery Account: The electronic money account you open and maintain with us in connection with the Services and which is available to access and view either through our Website, our Mobile App or the API.
Altery Services: The e-Money Services, the Payment Services and/or any other services provided by Altery as applicable.
Altery System, Altery Platform: A software solution on the web pages of Altery, developed by Altery and used to provide the services of Altery.
Bug: Any error, flaw, failure, or fault in the Altery System that produces an incorrect or unexpected result or causes it to behave in unintended ways.
Bug Hunting Program, the Program: The program organised by Altery Ltd to discover and resolve bugs, glitches, or vulnerabilities in Altery’s platform and services.
Bug Hunting Program Participant, the Participant: A person who has discovered a bug in the Altery System, reported it to Altery, and is eligible for a reward.
Business Day: Any day on which we are open for business and carrying out Transactions. This excludes official non-working days in the UK, such as weekends and public holidays.
Confidential Information: Any nonpublic information related to the Altery System, including but not limited to the existence of a bug, details of the bug, and any communications regarding the Program.
Customer: An Individual or Corporate Customer.
Submission: A record and description of a bug submitted according to these Terms.

2. Eligibility for the Program

2.1 The participant must be eligible under the Altery Terms and Conditions.

2.2 Have an active and verified Altery account.

2.3 Be at least 18 years old or meet the legal age requirement in your jurisdiction.

2.4 Not be an employee, contractor, or immediate family member of Altery staff.

2.5 Comply with applicable laws and regulations.

3. Scope

3.1 The Program is limited to Altery’s platform and services.

3.2 Bugs must be reported via the designated bug reporting form or email.

3.3 Reports must include detailed and reproducible steps for identifying the bug.

3.4 Submissions must pertain to the latest publicly available version of the application.

4. ReportingBugs

4.1 All submissions must include a detailed description of the bug, steps to reproduce, and any other relevant information.

4.2 Participants must follow ethical guidelines and not compromise the privacy or security of Altery’s users.

4.3 The Participant shall use only their own data during participation in the Program.

4.4 Reports must not include any unlawful or unethical testing methods, including but not limited to social engineering, DDoS attacks, or physical attacks against our infrastructure.

4.5 Participants are prohibited from:
– Conducting attacks that may harm or compromise the reliability or integrity of Altery’s data or services.
– Using bug research methods that could lead to customer service issues.
– Obtaining or using data of Altery Clients through participation in the Program.
– Performing actions that would allow unauthorised access, storage, erasure, or manipulation of Altery or its Clients’ data.
– Causing interruptions in the Altery System, disrupting the activities of Altery Clients, exploiting a bug for personal gain, or violating legal requirements.

5. EvaluationandRewards

5.1 Altery’s development team will evaluate all submitted bugs based on severity, impact on system functionality, and security. You will receive feedback no later than 2 business days after you submit the bug with estimated deadlines for validating the bug.

5.2 We may ask for additional information that may be required to validate the reported bug. Submissions may be closed if a Participant is non-responsive to requests for information after 7 days.

5.3 Decisions made by Altery regarding the validity and severity of the reported bug are final.

5.4 Reward amounts will vary based on the severity and impact of the bug:
– Minor Bugs: 5 EUR (Minor visual glitches, typos, non-critical user experience issues).
– Moderate Bugs: 20 EUR (Functional bugs that affect specific features but do not compromise security or significantly hinder the user experience).
– Critical Vulnerabilities: 30 EUR (Security vulnerabilities that could lead to unauthorised access, data breaches, or significant disruption of services).

5.5 Rewards will be paid out to the participant’s Altery account balance within 3 business days of bug validation. To receive the reward, the participant’s Altery account must be active, verified, not restricted or suspended. If the participant does not have an Altery account at the time of reporting a bug, they must create and verify an account if eligible for a reward. This is only applicable to bugs noticeable before account verification.

5.6 Only bugs acknowledged by Altery will be rewarded. Rewards are issued in EUR. If a bug is reported by two or more participants within 24 hours, the reward will be split among them. Rewards are proportional to the severity of the bug. Rewards are only given for bugs that are discovered for the first time and have not been previously reported or known.

5.7 In case of disagreements about the reward amount or eligibility, decisions made by the Altery Bug Hunting Committee are final.

6. Confidentiality

6.1 Participants must not disclose any information regarding identified bugs until they are resolved by Altery.

6.2 All communications regarding the Program must remain confidential.

6.3 Breaches of confidentiality may result in disqualification from the Program, orfeiture of rewards, legal action against the participant for unauthorised use or disclosure of confidential information.

6.4 The Participant is obligated to adhere to the Confidentiality requirements – all information obtained using, participating, or intending to participate in the Program belongs to Altery and shall be deemed Confidential. Altery reserves the right to take legal action for the use or disclosure of information related to the Program or otherwise disseminating such information.

6.5 Disclosure of bug-related information is only allowed after resolution and with prior written permission from Altery.

7. Modifications and Termination

7.1 Altery reserves the right to modify or terminate this Program at any time without prior notice.

7.2 Any changes to the Program will be communicated via Altery’s official channels without prior notice to participants.

8. Legal Compliance

8.1 Participants must comply with all applicable laws and regulations in their jurisdiction.

8.2 Participants are responsible for ensuring their participation in the Program does not breach any employment agreements, contractual obligations, or applicable laws in their jurisdiction.

8.3 This Program is void where prohibited by law.

9. Limitation of Liability

9.1 Altery is not responsible for any damages or losses resulting from participation in this Program.

9.2 Altery’s liability is limited to the reward amount determined for each valid bug report.

10. Dispute Resolution

10.1 Any disputes arising from or related to this Program shall be resolved through amicable negotiation. If not resolved, disputes shall be submitted to the exclusive jurisdiction of the courts in the United Kingdom.

11. Data Protection

11.1 The Participant agrees to provide Altery with their personal and contact details (name, surname, personal identification number, citizenship, residential address, bank account number) in order for Altery to pay the reward for their participation in the Bug Hunting Program in accordance with the requirements of Altery, and perform other actions set out by legislation.

11.2 The Participant agrees that Altery will process the provided data in order to pay a reward for participation in the Program. Altery ensures the security of the data obtained through the Participant’s participation in the Program. The data will be collected, processed and stored in accordance with Altery Privacy Policy.

12. Contact Information

12.1 For any inquiries or further information about the Program, please contact [email protected].