HACKTIXBack to home
HACKTIX policies

Privacy Policy

This draft explains the categories of information HACKTIX may process. It must be finalised with the actual operating entity, vendors, retention periods and contact details before public launch.

Publication note: This is a working policy draft, not legal advice. Complete the operating-entity, contact, retention, vendor and jurisdiction details and obtain legal review before relying on it as a final legal document.

Information we process

Account details such as name, email and phone; organisation and event information; team and participant details; jury profiles; evaluation records; certificates; security logs and support communications.

How information is used

To create and administer workspaces, operate event workflows, authenticate users, provide jury access, calculate evaluation results, issue certificates, secure the service and respond to support requests.

Roles and responsibilities

An organisation using HACKTIX may determine why participant and event data is collected. HACKTIX may process that information to provide the platform. The final policy and customer agreement must clearly allocate controller and processor responsibilities.

Sharing and service providers

Information may be handled by hosting, infrastructure, security, email and other service providers where required to operate the platform. A current vendor list and transfer details must be added before launch.

Retention and rights

Retention periods, deletion workflows and processes for access, correction, erasure, grievance and other applicable rights must be documented and implemented before launch.

Security

We use access controls and technical safeguards appropriate to the service. No internet service can guarantee absolute security.

Contact and grievance handling

Insert the operating entity's privacy contact and, where required, grievance officer details before publication.