TO THE MAXIMUM EXTENT PERMITTED BY SWEDISH LAW:

• HackAid, its volunteers, organizers, and affiliated institutions SHALL NOT BE LIABLE for any damages, losses, costs, or expenses arising from or related to:
• Use or inability to use HackAid services
• Errors, omissions, or inaccuracies in forensic analysis or recommendations
• Loss or corruption of data during evidence handling
• Delays in service delivery or case assignment
• Actions taken or not taken based on HackAid's findings or recommendations
• Disclosure or breach of information submitted to HackAid
• Client WAIVES ALL CLAIMS against HackAid and its volunteers related to service delivery
• Client AGREES TO INDEMNIFY AND HOLD HARMLESS HackAid, its volunteers, and affiliated institutions from any claims, liabilities, or expenses arising from Client's use of services

4. Confidentiality & Data Handling

• HackAid will make reasonable efforts to handle submitted information confidentially
• All evidence files are encrypted using AES-256-GCM and stored in secure S3 storage
• Evidence is decrypted only for authorized volunteers during download
• Due to the volunteer nature of services, absolute confidentiality cannot be guaranteed
• Client is responsible for assessing whether their data is appropriate for submission
• HackAid may decline cases involving highly sensitive or classified information

5. Client Rights - Data Deletion

• Client may delete their application and all submitted evidence at any time via their application URL
• Deletion is permanent and irreversible
• Upon deletion, all application data, evidence files, and activity logs are permanently removed
• Volunteers immediately lose access to deleted cases

6. No Legal or Compliance Advice

• HackAid provides technical forensics analysis only
• Services do NOT constitute legal advice, compliance consulting, or professional cybersecurity services
• Client is responsible for:
• Consulting legal counsel regarding incident reporting obligations
• Compliance with data breach notification laws
• Law enforcement coordination
• Regulatory requirements (GDPR, HIPAA, etc.)

7. Scope Limitations

• HackAid assists with post-incident forensics and analysis
• Services do NOT include:
• Active incident containment or threat remediation
• Live system access or penetration testing
• Ongoing monitoring or security operations
• Testimony or expert witness services
• Guaranteed court-admissible forensic reports

8. Volunteer Availability

• Case assignment depends on volunteer availability and expertise
• HackAid may decline cases due to:
• Resource limitations
• Lack of relevant expertise
• Complexity beyond volunteer capabilities
• Conflicts of interest
• Applications may be closed without service delivery if no suitable volunteer is available

9. Client Responsibilities

Client agrees to:

• Provide accurate and complete information about the incident
• Preserve evidence and systems as instructed
• Cooperate with assigned volunteers
• Not hold volunteers personally liable for service outcomes
• Acknowledge that findings are preliminary and may require professional validation

10. Acceptance

For legal matters, law enforcement coordination, or regulatory compliance, please consult appropriate legal counsel.

11. Governing Law

These terms are governed by Swedish law. Any disputes shall be resolved in Swedish courts.

12. Contact

For questions about these terms:

• Email: help@hackaid.org