Terms of Service

These Terms of Service ('Terms') constitute a legally binding agreement between PhishShield Technologies Pvt. Ltd. ('PhishShield', 'we', 'us') and you or the organization you represent ('Customer', 'you').

By creating an account, accessing, or using the PhishShield platform at phishshield.in ('Platform'), you confirm that you have read, understood, and agree to be bound by these Terms and our Privacy Policy. If you do not agree, you must not use the Platform.

If you are using the Platform on behalf of an organization, you represent that you have authority to bind that organization to these Terms.

PhishShield is a security awareness and authorized phishing simulation platform. The Platform is provided exclusively for:

• Authorized security awareness testing of your own employees within your own organization.
• Measuring and improving employee resilience against phishing, smishing, vishing, and QR code attacks.
• Delivering security training to employees who interact with simulated attack scenarios.
• Generating risk analytics and compliance reports for your organization's security program.

You must obtain all necessary authorizations, consents, and approvals from relevant stakeholders (HR, legal, management) within your organization before launching simulations targeting your employees.

PhishShield simulations must never be used against individuals or organizations without their organization's explicit authorization. Any use of the Platform for unauthorized testing, harassment, fraud, or any illegal purpose is strictly prohibited and will result in immediate account termination and potential legal action.

You must provide accurate, complete, and current information when creating your account. You are responsible for maintaining the confidentiality of your login credentials and for all activity that occurs under your account.

You must notify us immediately at support@phishshield.in of any unauthorized access to or use of your account. We are not liable for any loss or damage resulting from your failure to maintain account security.

You must be at least 18 years of age and have legal capacity to enter into contracts under applicable law to use the Platform.

PhishShield offers a Free plan and paid subscription plans (Pro, Enterprise). Paid plans are billed monthly or annually through Razorpay.

• Free plan: limited to 10 targets and 1 campaign per month with no payment required.
• Pro plan: ₹200/user/month (monthly billing) or ₹100/user/month (annual billing, billed as ₹1,200/user/year).
• Enterprise plan: custom pricing based on contract. Contact sales@phishshield.in.

All prices are in Indian Rupees (INR) and are exclusive of applicable taxes including GST. GST will be added at the prevailing rate.

Subscriptions auto-renew at the end of each billing period. You may cancel at any time from your billing settings; cancellation takes effect at the end of the current billing period.

We reserve the right to modify pricing with 30 days' notice to existing subscribers. Continued use after the notice period constitutes acceptance of the new pricing.

You agree not to use the Platform to:

• Conduct phishing simulations against individuals or organizations without proper organizational authorization.
• Send actual malicious content, malware, or real credential-harvesting links — the Platform is for simulation only.
• Attempt to reverse-engineer, decompile, or extract the source code of the Platform.
• Resell, sublicense, or provide the Platform as a service to third parties without a written reseller agreement with PhishShield.
• Upload content that is illegal, defamatory, discriminatory, or violates any third party's intellectual property rights.
• Interfere with or disrupt the Platform's infrastructure, servers, or networks.
• Use automated tools to scrape, crawl, or extract data from the Platform beyond normal use.
• Impersonate PhishShield, our employees, or any other person in communications.

You retain all ownership and intellectual property rights in the data you upload to the Platform, including employee target lists, campaign configurations, and custom templates ('Customer Data').

You grant PhishShield a limited, non-exclusive license to process Customer Data solely to provide the Platform services described in these Terms.

We do not use Customer Data to train AI models or for any purpose outside providing your contracted services.

You are responsible for ensuring you have the legal right to upload and process all Customer Data, including employee personal data, in accordance with applicable laws including DPDPA 2023.

PhishShield and its licensors own all intellectual property rights in the Platform, including software, templates, training content, trademarks, and documentation. Nothing in these Terms transfers any such rights to you.

You may not copy, modify, distribute, or create derivative works based on the Platform or its content without our prior written consent.

Feedback you provide about the Platform may be used by us freely without any obligation to you.

Each party may have access to confidential information of the other. Both parties agree to maintain the confidentiality of such information using at least the same degree of care they use for their own confidential information, and not to disclose it to third parties without prior written consent.

Confidentiality obligations do not apply to information that is publicly available, independently developed, or required to be disclosed by law.

The Platform is provided 'as is' and 'as available'. PhishShield does not warrant that the Platform will be uninterrupted, error-free, or free from viruses or other harmful components.

PhishShield's total cumulative liability to you for any claims arising from or related to these Terms or the Platform shall not exceed the amounts paid by you to PhishShield in the 12 months preceding the claim.

PhishShield shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including loss of profits, data, or goodwill, even if advised of the possibility of such damages.

Some jurisdictions do not allow limitation of certain warranties or liabilities. To the extent such laws apply, some limitations above may not apply to you.

You agree to indemnify, defend, and hold harmless PhishShield and its officers, directors, employees, and agents from any claims, liabilities, damages, losses, and expenses (including legal fees) arising from:

• Your use of the Platform in violation of these Terms.
• Your violation of any applicable law or regulation.
• Your infringement of any third party's rights.
• Unauthorized phishing simulations conducted using your account.

Either party may terminate these Terms with 30 days' written notice. PhishShield may terminate or suspend your account immediately, without notice, if you materially breach these Terms.

Upon termination, your right to access the Platform ceases. We will retain your data for 30 days after termination, during which you may request an export. After that period, data will be permanently deleted unless required by law.

These Terms are governed by the laws of India. Any disputes arising from these Terms or the Platform shall be subject to the exclusive jurisdiction of the courts in Bengaluru, Karnataka, India.

Before initiating formal proceedings, both parties agree to attempt good-faith resolution of any dispute within 30 days of written notice.

We may update these Terms from time to time. We will notify you of material changes via email and by posting updated Terms with a revised date. Continued use of the Platform after the effective date constitutes your acceptance of the revised Terms.

PhishShield Technologies Pvt. Ltd.

Legal enquiries: legal@phishshield.in

Sales: sales@phishshield.in

Support: support@phishshield.in