Bug Bounty Program

Bug bounty for better security at Lunit

Bug Bounty Program Policy

1. Legal Considerations

  • By participating in the Bug Bounty Program (“Program”), the Participant agrees to comply with this policy, all applicable laws and regulations regarding privacy and lawful data processing.
  • By participating in the Program, the Participant agrees to submit a Personal Information Collection Consent form (Appendix 2).
  • Lunit reserves the right to modify, suspend, or terminate the Program at any time without prior notice.

2. Intellectual Property Rights

This policy does not grant Participants any intellectual property rights, licenses, or ownership in our platforms or associated services. “Intellectual Property Rights” include patents, copyrights, trademarks, trade secrets, and any related rights under international laws and conventions.

Confidentiality Obligations

  • Any information that the Participant receives or collects about Lunit, our affiliates, or any of our users, employees, or agents in connection with the Bug Bounty Program (“Confidential Information”) must be kept confidential and only used in connection with the Bug Bounty Program.
  • Participant may not use, disclose, or distribute any such Confidential Information, including without limitation any information regarding the Bug Bounty Submission Form (as set forth in Appendix 1), without Lunit’s prior written consent.
  • Upon termination of the collaboration with Lunit, the Participant shall immediately return to Lunit and erase from its computer systems, all documents and materials containing, reflecting, incorporating, or based on Confidential Information.
  • Lunit will keep the Participant’s information confidential and will not disclose the same to any third party except as may be necessary for the Program to perform its obligations or exercise its rights under this Agreement.

4. Disclaimer

Lunit reserves the right to make amendments, updates, or modifications to this policy at any time without notice. It is the Participant’s responsibility to review this policy periodically for updates and to ensure continued compliance.

5. Reporting process