Terms of Service
Last updated: February 28, 2026
1. Acceptance of Terms
By accessing or using the empowsec platform, operated by empowsec Corporation, you agree to be bound by these Terms. If you act for an organization, you represent that you have authority to bind it.
If you do not agree, you must not access or use the Service. Continued use after modifications constitutes acceptance of those changes.
2. Service Description
- Security awareness training courses and learning modules.
- Simulated phishing campaigns, compliance tracking, reports, analytics, and certificates.
- White-label and reseller capabilities, REST API access, and an Outlook add-in for phishing reporting.
We may modify, update, or discontinue Service features with reasonable notice.
3. Account Registration and Security
You must provide accurate and current registration information, keep account credentials confidential, and notify us immediately of unauthorized use or security breaches. Accounts are non-transferable without our prior written consent.
4. Subscription, Billing and Payments
- Seat-Based Pricing. The Service is billed by active user seats.
- True-Up. Additional active seats above your subscribed count may be invoiced on a prorated basis.
- Free Trials. Trials may be offered at our discretion and convert to paid subscriptions unless canceled before expiration.
- Auto-Renewal. Subscriptions renew automatically unless canceled before renewal.
- Payment and Late Payments. Fees are due in advance and non-refundable except as stated. Overdue balances may accrue lawful interest and access may be suspended after notice.
5. Phishing Simulation Authorization and Disclaimer
By using phishing simulation features, you represent that you have legal authority and internal approvals to target users in your organization, will comply with applicable law and workplace policies, and will not use the features outside legitimate awareness testing.
We disclaim liability for claims, damages, or consequences arising from your use of phishing simulation features, and you agree to indemnify us from such claims.
6. Data Privacy and Processing
You are the controller for personal data uploaded to the Service, and we process it as your processor according to your instructions, these Terms, and applicable data processing agreements. We maintain appropriate technical and organizational safeguards and may use sub-processors to provide the Service.
7. Intellectual Property
The Service, training materials, software, trademarks, and proprietary technology remain the property of empowsec Corporation or its licensors. You receive only the limited right to use the Service during an active subscription.
You retain rights to Customer Data and grant us a limited license to use, process, and store it solely to provide the Service. You may not copy, modify, sell, reverse engineer, or create derivative works from the Service without consent.
8. White-Label and Reseller Terms
- Resellers may provision the Service to end customers under permitted branding, subject to these Terms and applicable reseller agreements.
- You are responsible for your relationship with sub-customers, including support, billing, compliance, and ensuring their compliance with these Terms.
- You may not make warranties on our behalf and must indemnify us from claims arising from reseller activities or sub-customer use.
9. Affiliate Program Terms
Affiliate commissions, payment schedules, and thresholds are governed by program details and may change with notice. Fraudulent, deceptive, spam, self-referral, cookie stuffing, or trademark bidding activity may result in termination and forfeiture of unpaid commissions.
10. API Usage Terms
- API access is available only for eligible plans and may be subject to limits and quotas.
- API keys are confidential and must not be public or embedded in client-side code.
- You may not use the API to build a competing product, scrape, harvest, or redistribute content or data.
- We may modify, deprecate, throttle, suspend, or terminate API access for excessive or abusive use.
11. Acceptable Use Policy
- Do not use the Service unlawfully, attack or disrupt the Service, upload malicious code, or attempt unauthorized access.
- Do not use phishing simulations against third parties, harvest real credentials, harass users, or conduct activity outside legitimate internal awareness testing.
- Do not resell, redistribute, sublicense, remove notices, or alter proprietary marks except as expressly authorized.
12. Disclaimer of Warranties
The Service is provided on an "as-is" and "as-available" basis without warranties of any kind. We disclaim implied warranties of merchantability, fitness for a particular purpose, title, and non-infringement.
We do not guarantee uninterrupted, error-free, secure operation or that training or simulations will prevent security incidents. The Service assists awareness and is not a substitute for comprehensive cybersecurity measures.
13. Limitation of Liability
To the maximum extent permitted by law, empowsec Corporation and its affiliates, officers, directors, employees, agents, and licensors are not liable for indirect, incidental, special, consequential, punitive, exemplary, or similar damages.
Our total aggregate liability arising from these Terms or the Service will not exceed the fees paid by you to empowsec during the twelve months immediately preceding the event giving rise to the claim.
Where limitations are not permitted, liability is limited to the greatest extent allowed by applicable law.
14. Indemnification
You agree to indemnify, defend, and hold harmless empowsec Corporation and its affiliates, officers, directors, employees, and agents from claims, liabilities, damages, losses, costs, and expenses arising from your use of the Service, simulations, legal violations, uploaded data, or sub-customer use.
15. Termination
You may cancel at any time through account settings, effective at the end of the current billing period. We may suspend or terminate access for breach, fraud, non-payment after notice, or with 30 days notice. Upon termination, access ceases and data may be deleted after a reasonable retention period unless longer retention is required.
16. Governing Law and Dispute Resolution
These Terms are governed by Wyoming law, without regard to conflict rules. Disputes are resolved by binding arbitration administered by the American Arbitration Association in Wyoming, except either party may seek equitable relief to protect intellectual property or confidential information.
You and empowsec agree that claims may be brought only in an individual capacity and not as a plaintiff or class member in any class or representative action.
17. Modifications to Terms
We may modify these Terms at any time. Material changes will be posted with an updated date, and changes adversely affecting your rights will receive at least 30 days notice by email or in-app notification where appropriate. Continued use after effectiveness constitutes acceptance.
18. Severability and Entire Agreement
If a provision is invalid or unenforceable, remaining provisions continue in effect and the invalid provision will be modified to preserve intent. These Terms, together with applicable DPA, reseller agreement, or order form, are the entire agreement regarding the Service. Failure to enforce a right is not waiver, and assignment is restricted except as stated.
19. Contact Information
If you have questions about these Terms, contact us at: