Terms of Service

1. Agreement

These terms form an agreement between PhishHaven (“we”, “us”) and the organisation that creates an account (“you”). By creating an account or using the platform you accept these terms on behalf of your organisation.

2. The service

PhishHaven provides simulated phishing campaigns, teachable-moment training pages, risk reporting and related administrative tooling. Features may change as the product evolves.

Simulations are training exercises. They are not a security audit, penetration test, or certification of your security posture.

3. Acceptable use

You may only run simulations against employees, contractors, or members of organisations you are authorised to test. You are responsible for obtaining any internal approvals or employee notices required in your jurisdiction.

You must not use the platform to send unsolicited email to third parties, to harvest credentials, to distribute malware, or for any unlawful purpose.

4. Accounts and security

You are responsible for the accuracy of the account details you provide, for keeping credentials confidential, and for all activity performed under your administrator accounts. Notify us promptly if you suspect unauthorised access.

5. Subscriptions and billing

Paid plans are billed in advance through our payment processor on a recurring basis until cancelled. Seat-based plans are charged according to the seats included in your plan or in use during the billing period.

You can cancel at any time from the billing page; access continues until the end of the current paid period. Except where required by law, fees already paid are non-refundable.

6. Partner (MSP) accounts

Managed service providers may create and manage client organisations. As a partner you are responsible for your clients' authorisation to be tested, for the accuracy of the data you upload on their behalf, and for the fees associated with all seats under your account.

7. Your data

You retain ownership of the employee and campaign data you upload. We process it to provide the service as described in our Privacy Policy. You are responsible for having a lawful basis to share employee contact details with us.

8. Availability and support

We aim to keep the platform available and reliable but do not guarantee uninterrupted service. Planned maintenance, third-party outages, and factors outside our control may affect availability.

9. Disclaimers and liability

The platform is provided “as is”, without warranties beyond those that cannot be excluded by law. We are not liable for indirect or consequential loss, and our total liability for any claim is limited to the fees you paid in the twelve months before the claim arose.

10. Suspension and termination

We may suspend or terminate access if these terms are breached, if payment fails, or if use of the platform creates a legal or security risk. You may stop using the platform and delete your account at any time.

11. Changes to these terms

We may update these terms as the product and our legal obligations change. Material changes will be communicated to account administrators by email or in-app notice before they take effect.

12. Contact

Questions about these terms can be sent through our contact page and we will respond to the account administrator on record.