Yes, that's not token sale as you said. however There's a good and bad side while submitting KYC for bounty hunters.
Good thing is the KYC process will eliminate bounty scammers from the list
bad thing is There is no guarantee what your data will be made to by those who receive your KYC data.
However, KYC must also be implemented using the same method as Token Sale, even though Bounty Hunters don't invest money there (but they invest with their work that promotes the project).
if the KYC mechanism differs between Bounty Hunters and Investors (for example, KYC Bounty Hunters with Google Form) I think this should be further investigated, even for good projects. because it is possible, bounty managers collect your data unilaterally and without the project developer knowing, then they (Bounty Managers) use your data for their needs.