Privacy Policy
This draft explains the categories of information HACKTIX may process. It must be finalised with the actual operating entity, vendors, retention periods and contact details before public launch.
Information we process
Account details such as name, email and phone; organisation and event information; team and participant details; jury profiles; evaluation records; certificates; security logs and support communications.
How information is used
To create and administer workspaces, operate event workflows, authenticate users, provide jury access, calculate evaluation results, issue certificates, secure the service and respond to support requests.
Roles and responsibilities
An organisation using HACKTIX may determine why participant and event data is collected. HACKTIX may process that information to provide the platform. The final policy and customer agreement must clearly allocate controller and processor responsibilities.
Sharing and service providers
Information may be handled by hosting, infrastructure, security, email and other service providers where required to operate the platform. A current vendor list and transfer details must be added before launch.
Retention and rights
Retention periods, deletion workflows and processes for access, correction, erasure, grievance and other applicable rights must be documented and implemented before launch.
Security
We use access controls and technical safeguards appropriate to the service. No internet service can guarantee absolute security.
Contact and grievance handling
Insert the operating entity's privacy contact and, where required, grievance officer details before publication.