Terms of Service

By accessing or using Kaspera Shield (the "Service"), operated by Kaspera LLC ("we," "us," or "Kaspera"), you agree to be bound by these Terms of Service ("Terms") on behalf of the organization you represent. If you do not agree to these Terms, you may not access or use the Service.

Your continued use of the Service following any updates to these Terms constitutes acceptance of the revised Terms.

Kaspera Shield is an AI-powered cybersecurity SaaS platform designed for small and medium enterprises (SMEs) and local government offices. The Service includes, but is not limited to:

• Vulnerability scanning of web-facing domains and infrastructure
• Phishing simulation campaigns for employee security awareness training
• AI-generated security policy creation and management
• Security awareness quizzes, onboarding tracks, and policy acknowledgement tracking
• Breach monitoring using third-party data sources
• Vendor risk assessments
• AI-powered risk profiling and security score calculation
• Compliance audit tracking and reporting

To use the Service, you must register an account and create an organization. You agree to provide accurate, complete, and current information during registration and to keep your account information up to date.

Each organization account is administered by one or more designated administrators ("Admins"). Admins are responsible for all activity under their organization, including the actions of users they invite. You are responsible for maintaining the confidentiality of your login credentials.

You agree to use the Service only for lawful purposes and in accordance with these Terms. You may not:

• Use the Service for any unlawful, fraudulent, or malicious purpose
• Use the phishing simulation feature to target individuals outside your authorized organization or without appropriate consent
• Attempt to circumvent subscription tier restrictions, billing mechanisms, or feature gates
• Reverse engineer, decompile, disassemble, or otherwise attempt to derive the source code of the Service
• Use the vulnerability scanner to scan domains or infrastructure you do not own or have authorization to test
• Resell, sublicense, or provide access to the Service to any third party without our prior written consent
• Intentionally interfere with the operation or integrity of the Service

The phishing simulation feature is provided strictly for authorized internal security awareness training within your organization. By using this feature, you represent and warrant that:

• You will only run campaigns targeting employees who are employed by or contracted to your organization
• Your employees have been informed, as part of their employment or contractor agreement, that security testing (including simulated phishing) may occur
• You have obtained any required legal authorization to conduct simulated phishing within your jurisdiction

Kaspera LLC is not liable for any damages, legal claims, or consequences arising from the misuse of the phishing simulation feature. You accept full legal responsibility for how you deploy phishing simulations through the Service.

Free Trial. New accounts receive a 14-day free trial with full access to Business-tier features. No credit card is required. The trial automatically expires at the end of the 14-day period, at which point access to gated features is restricted until a paid plan is selected.

Paid Plans. Paid subscriptions are billed monthly via Stripe. By subscribing, you authorize us to charge the payment method on file for the applicable subscription fee. All fees are quoted in US dollars.

No Refunds. Subscription fees are non-refundable. No prorated refunds are issued for partial months or unused portions of a billing period.

Cancellation. You may cancel your subscription at any time. Cancellation takes effect at the end of the current billing period. You will retain access to paid features until that date.

The Service stores organizational security data, scan results, employee information, training records, and other data you provide. You retain ownership of all data you upload or generate through the Service.

We implement commercially reasonable security measures to protect your data, including encryption in transit and at rest, access controls, and routine security monitoring.

We do not sell your data to third parties. Data is shared only with the service providers necessary to operate the platform (see our Privacy Policy for details).

Kaspera Shield uses artificial intelligence to generate security policies, phishing simulation emails, risk assessments, training quizzes, and other content. This AI-generated content is provided as a starting point and for informational purposes only.

You should review all AI-generated content with qualified legal, compliance, or security professionals before formal adoption or publication. Kaspera LLC makes no warranty that AI-generated content is legally sufficient, complete, or appropriate for your specific regulatory or organizational requirements.

The Kaspera Shield platform, including its software, design, branding, algorithms, and underlying technology, is the intellectual property of Kaspera LLC and is protected by applicable copyright, trademark, and other intellectual property laws.

You retain ownership of all data, documents, and content you create or upload through the Service. By using the Service, you grant Kaspera LLC a limited license to process your data solely for the purpose of providing and improving the Service.

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

Without limiting the foregoing, Kaspera LLC does not warrant that: (a) vulnerability scans will detect all security issues on your systems; (b) phishing simulations will identify all susceptible employees; (c) AI-generated content will meet your specific legal or compliance requirements; or (d) the Service will be uninterrupted or error-free.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, KASPERA LLC'S AGGREGATE LIABILITY ARISING FROM OR RELATED TO THESE TERMS OR THE SERVICE SHALL NOT EXCEED THE TOTAL AMOUNTS PAID BY YOU TO KASPERA LLC IN THE THREE (3) MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM.

IN NO EVENT SHALL KASPERA LLC BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF PROFITS, DATA, OR BUSINESS OPPORTUNITY, REGARDLESS OF THE CAUSE OF ACTION OR THE THEORY OF LIABILITY.

You agree to indemnify, defend, and hold harmless Kaspera LLC and its officers, directors, employees, and agents from and against any claims, liabilities, damages, losses, and expenses (including reasonable attorney's fees) arising out of or in connection with: (a) your use of the Service; (b) your violation of these Terms; or (c) your misuse of any Service feature, including the phishing simulation and vulnerability scanning tools.

Either party may terminate the agreement at any time. You may terminate by canceling your subscription and ceasing use of the Service. We may terminate or suspend your access if you violate these Terms or if required by law.

Upon termination, your organization's data will be retained for 30 days to allow for export. After 30 days, data will be permanently deleted unless otherwise required by law.

These Terms are governed by and construed in accordance with the laws of the State of Florida, United States, without regard to its conflict of laws provisions. Any disputes arising under these Terms shall be resolved in the state or federal courts located in the State of Florida.

We reserve the right to update these Terms at any time. We will provide at least 14 days' notice of material changes via email to the address associated with your account or via an in-app notification banner. Continued use of the Service after the effective date of changes constitutes acceptance of the updated Terms.

If you have questions about these Terms, please contact us at legal@kasperashield.com.