Terms of Service

1. Acceptance of Terms

By accessing or using the CIPHIUM platform, website, or any services provided by CIPHIUM ("we", "us", or "our"), you agree to be bound by these Terms of Service ("Terms"). If you do not agree to all of these Terms, you must not access or use our services.

These Terms constitute a legally binding agreement between you (whether as an individual or on behalf of an organization) and CIPHIUM. Your continued use of our services after any modifications to these Terms constitutes acceptance of those changes.

2. Description of Services

CIPHIUM provides offensive cybersecurity assessment tools and services, including but not limited to:

• Phishing simulation campaigns (email, SMS, and voice-based)
• Deepfake generation for security awareness training
• Social engineering simulation and testing
• Human risk analytics and reporting dashboards
• Security awareness training modules
• API access for integration with third-party systems

Our platform is designed to help organizations assess and improve their human security posture through controlled, ethical simulations conducted with proper authorization.

3. Account Registration

To use our services, you must create an account and provide accurate, complete, and current information. You are responsible for:

• Maintaining the confidentiality of your account credentials
• All activities that occur under your account
• Promptly notifying us of any unauthorized use of your account
• Ensuring that all information provided during registration is accurate and up-to-date

We reserve the right to suspend or terminate accounts that contain inaccurate information or violate these Terms.

4. Acceptable Use

You agree to use our services only for lawful purposes and in accordance with these Terms. You must NOT:

• Conduct simulations against individuals or organizations without proper written authorization
• Use our tools to conduct actual cyberattacks, fraud, or any malicious activity
• Attempt to gain unauthorized access to any systems, networks, or data not covered by your assessment scope
• Violate any applicable local, state, national, or international laws or regulations
• Redistribute, resell, or sublicense our services without prior written consent
• Reverse engineer, decompile, or disassemble any part of our platform

Violation of these acceptable use policies may result in immediate termination of your account and may be reported to law enforcement authorities.

5. Intellectual Property

All intellectual property rights in the CIPHIUM platform, including but not limited to software, algorithms, designs, documentation, trademarks, and trade secrets, are owned by CIPHIUM or its licensors.

Subject to these Terms, we grant you a limited, non-exclusive, non-transferable, revocable license to access and use our services for your internal business purposes. This license does not include the right to modify, copy, distribute, or create derivative works from our platform.

Any data, reports, or analytics generated through your use of our platform based on your organizational data remain your property. However, we retain the right to use anonymized and aggregated data to improve our services.

6. Payment Terms

Paid subscriptions are billed on a monthly or annual basis, as selected during checkout. By subscribing to a paid plan, you agree to the following:

• Payments are due at the beginning of each billing cycle
• Subscriptions automatically renew unless cancelled before the renewal date
• All prices are listed in Indian Rupees (INR) and are exclusive of applicable taxes
• We reserve the right to change pricing with 30 days advance notice

Refund Policy

If you are not satisfied with our services, you may request a refund within 14 days of your initial purchase. Refunds for renewal payments are not available. All refund requests should be directed to [email protected].

7. Data Processing

Our handling of personal data is governed by our Privacy Policy. By using our services, you acknowledge that you have read and understood our Privacy Policy.

For enterprise customers, we offer a Data Processing Agreement (DPA) that complies with GDPR and other applicable data protection regulations. To request a DPA, please contact [email protected].

8. Service Level Agreement

We commit to maintaining a platform uptime of 99.9% measured on a monthly basis, excluding scheduled maintenance windows.

• Scheduled maintenance will be communicated at least 48 hours in advance
• Emergency maintenance may occur without prior notice to address critical security issues
• Service credits may be issued for downtime exceeding the 99.9% uptime commitment for Pro and Enterprise plan customers

9. Limitation of Liability

To the maximum extent permitted by applicable law, CIPHIUM and its directors, employees, agents, and affiliates shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to loss of profits, data, business opportunities, or goodwill, arising from your use of or inability to use our services.

Our total aggregate liability for any claims arising out of or related to these Terms or our services shall not exceed the total amount paid by you to CIPHIUM during the twelve (12) months preceding the event giving rise to the claim.

10. Indemnification

You agree to indemnify, defend, and hold harmless CIPHIUM, its officers, directors, employees, and agents from and against any claims, damages, losses, liabilities, costs, and expenses (including reasonable attorney fees) arising from:

• Your use or misuse of our services
• Your violation of these Terms
• Your violation of any applicable law or regulation
• Any claim that your use of our services infringes on the rights of any third party

11. Termination

Either party may terminate this agreement at any time. You may cancel your subscription through your account settings or by contacting our support team.

We reserve the right to suspend or terminate your access to our services immediately, without prior notice, if:

• You breach any provision of these Terms
• Your use of the services poses a security risk to us or others
• We are required to do so by law or regulation
• Your account has been inactive for more than 12 months

Upon termination, your right to use our services ceases immediately. We will provide you with the ability to export your data for a period of 30 days following termination.

12. Governing Law

These Terms shall be governed by and construed in accordance with the laws of India, without regard to its conflict of law principles. Any legal proceedings arising out of or relating to these Terms shall be subject to the exclusive jurisdiction of the courts located in India.

13. Dispute Resolution

In the event of any dispute arising from these Terms, both parties agree to first attempt resolution through good-faith negotiation. If the dispute cannot be resolved within 30 days of written notice, either party may pursue mediation or arbitration.

Arbitration shall be conducted under the rules of the Indian Arbitration and Conciliation Act. The arbitration shall be held in India, and the decision of the arbitrator shall be final and binding.

14. Changes to Terms

We reserve the right to modify these Terms at any time. We will provide notice of material changes by posting the updated Terms on our website, updating the "Last updated" date, and sending email notifications to registered users where appropriate.

Your continued use of our services after the effective date of any modifications constitutes your acceptance of the updated Terms. If you do not agree with the changes, you must discontinue use of our services.

15. Contact

If you have any questions about these Terms of Service, please contact us: