Terms of use

Terms of Use Agreement

This Terms of Use Agreement (“Agreement”) sets out the terms on which RapidPhish (“Supplier”) supplies Services (as defined below) to the Customer. The Supplier has developed certain software applications and platforms which it makes available to subscribers via the internet on a pay-per-use basis for the purpose of Phishing Simulation Campaigns. “Customer” shall refer to the business, firm, company, organisation or other entity who purchases user subscriptions for any of the Services. The Customer and the Supplier may be referred to in this Agreement individually as a “party” or jointly as the “parties”.

This Agreement governs all Services provided by the Supplier, and supersedes any other terms and conditions previously used by the Supplier in connection with the provision of Services to the Customer.

The Supplier may update or make changes to this Agreement from time to time by giving notice to the Customer and such changes shall take effect from the date notified by the Supplier.

1 Interpretation

1.1 The definitions and rules of interpretation in this clause apply in this Agreement:

Authorised Users: those employees, agents and independent contractors of the Customer who are authorised by the Customer to access and use the RapidPhish platform, and for whom the Customer has purchased the relevant campaign credits.

Business Day: a day other than a Saturday, Sunday or public holiday in England when banks in London are open for business.

Customer Data: all data, information, content and material which is provided by the Customer to the Supplier or inputted into or uploaded to the Software Platform by the Customer, the Authorised Users and/or the Supplier (acting on the Customer’s behalf) for the purpose of accessing and using the Services or facilitating the Customer’s access and use of the Services (as applicable).

Documentation: the user documentation (including operating manuals) relating to the Platform and the Services which is made available by the Supplier from time to time.

Intellectual Property Rights: patents, rights to inventions, copyright and related rights, trade marks, business names and domain names, rights in get-up and trade dress, goodwill and the right to sue for passing off or unfair competition, rights in designs, rights in computer software, database rights, rights to use, and protect the confidentiality of, confidential information (including know-how) and all other intellectual property rights, in each case whether registered or unregistered and including all applications and rights to apply for and be granted, renewals or extensions of, and rights to claim priority from, such rights and all similar or equivalent rights or forms of protection which subsist or will subsist now or in the future in any part of the world.

Normal Business Hours: 8.00 am to 6.00 pm on any Business Day.

Service: the service provided by the Supplier to the Customer on a pay as you go basis for which the Customer has access to and use of the Software Platform and the Documentation.

Platform: the RapidPhish Phishing Simulation SaaS platform.

Software Updates: any update or patch to the Software Platform (or any part of it) which has been produced primarily to overcome any defect or error in the Platform.

Campaign credit: the number of phishing simulation campaigns purchased by the Customer via the RapidPhish website.

Support Services: the support services provided by the Supplier in accordance with the procedure set out in Schedule 1.

Website: the Supplier’s website at https://www.rapidphish.com.

1.2 Clause, schedule and paragraph headings shall not affect the interpretation of this Agreement

1.3 A reference to a person includes an individual, trust, partnership, government entity, company, corporation or unincorporated body (whether or not having separate legal personality). A reference to a party includes that party’s personal representatives, successors and permitted assigns.

1.4 A reference to a company shall include any company, corporation or other body corporate, wherever and however incorporated or established.

1.5 Unless the context otherwise requires, words in the singular shall include the plural and in the plural shall include the singular.

1.6 Unless the context otherwise requires, a reference to one gender shall include a reference to the other genders.

1.7 A reference to a statute or statutory provision is a reference to it as amended, extended or re-enacted from time to time.

1.8 A reference to a statute or statutory provision shall include all subordinate legislation made from time to time under that statute or statutory provision.

1.9 A reference to writing or written includes email.

1.10 References to clauses and Schedules are to the clauses and schedules of this Agreement; references to paragraphs are to paragraphs of the relevant Schedule to this Agreement.

1.11 Any words following the terms other, including, include, for example or any similar expression shall be construed as illustrative and shall not limit the sense of the words, description, definition, phrase or term preceding those terms.

2 Purchased credits

2.1 In signing up via the Website to purchase a phishing simulation campaign credit(s), the Customer confirms its acceptance of the terms of this Agreement, to the exclusion of any terms and conditions which the Customer purports to apply under any purchase order or similar document or which are implied by trade, custom, practice or course of dealing.

2.2 Subject to the Customer making a payment via the Website and complying with the terms and conditions of this Agreement, the Supplier hereby grants to the Customer a non-exclusive, non-transferable, non-sublicensable right, during the Subscription Term, to permit the Authorised Users to access and use the Services solely for Customer’s internal business operations.

3 Service

3.1 The Supplier shall provide the Service subject to the terms and conditions set out in this Agreement.

3.2 The Supplier shall use commercially reasonable endeavours to make the Services available 24 hours a day, except for planned or emergency maintenance which the Supplier shall use reasonable endeavours to notify the Customer of in advance.

3.3 The Supplier will, as part of the Services, use reasonable endeavours to provide the Support Services during Normal Business Hours.

3.4 The Supplier shall:

(a) provide the Services and the Support Services using reasonable care and skill; and

(b) provide the Services in accordance with all applicable laws.

3.5 The Supplier shall be entitled to make any changes, modifications or additions to the Services, and may implement any Software Updates, from time to time in its sole discretion.

3.6 This Agreement shall not prevent the Supplier from entering into similar agreements with third parties, or from independently developing, using, selling or licensing any documentation, products and/or services which are similar to those provided under this Agreement.

3.7 The Supplier warrants that it has and will maintain all necessary licences, consents, and permissions necessary for the performance of its obligations under this agreement.

4 Customer Data

4.1 The Customer shall own all right, title and interest in and to the Customer Data and shall be fully responsible for the legality, reliability, integrity, accuracy and quality of the Customer Data.

4.2 The Supplier shall back-up the Customer Data at regular intervals. The Customer may download a copy of the completed report data stored on the Software Platform at any time. Following termination or expiry of this Agreement, the Supplier may delete all Customer Data without liability to the Customer.

4.3 If the Supplier processes any Personal Data (as defined in Schedule 2) on behalf of the Customer when performing the Services or otherwise in connection with this Agreement, the parties shall comply with the provisions of Schedule 2.

4.4 The Supplier shall not be responsible for any loss, destruction, alteration or disclosure of Customer Data caused by any third party.

5 Customer’s obligations

5.1 The Customer shall, and shall procure that all Authorised Users shall:

(a) provide the Supplier with: (i) all necessary co-operation and access to such information as may be required by the Supplier in order to provide the Service (including Customer Data, security access information and systems and technical information) and shall ensure that such information is accurate and complete;

(b) comply with all applicable laws and regulations with respect to its activities under this Agreement;

(c) carry out all other Customer responsibilities set out in this Agreement in a timely and efficient manner. In the event of any delays in the Customer’s provision of such assistance as agreed by the parties, the Supplier may adjust any agreed timetable or delivery schedule as reasonably necessary;

(d) use the Services in accordance with the terms and conditions of this Agreement and the Customer shall be responsible for any Authorised User’s breach of this Agreement;

5.2 In relation to the Authorised Users, the Customer undertakes that:

(a) each Authorised User shall keep a secure password for accessing the Platform, which the Authorised User shall keep confidential at all times; and

(b) it shall disable any Authorised User’s access to the Services promptly upon termination or suspension of such Authorised User’s employment or services contract with the Customer.

5.3 The Customer shall not, and shall procure that the Authorised Users shall not:

(a) use any of the Service in any way that breaches any applicable law or regulation;

(b) use any of the Service to transmit, upload, disseminate or otherwise distribute any material that:

(i) is unlawful, harmful, threatening, defamatory, obscene, indecent, infringing, harassing, racially, religiously or ethnically offensive, or otherwise objectionable;

(ii) infringes any Intellectual Property Rights, rights of privacy, personality or publicity or other third party rights;

(iii) contains unsolicited or unauthorised advertising or promotional content;

(iv) facilitates or promotes illegal activity;

(v) threatens the security and/or confidentiality of the Service; and/or

(vi) causes damage to injury to any person or property;

(c) store, distribute or transmit any Viruses (or attempt to do the same) during the course of its use of the Services, or attack the Software Platform via a denial-of-service attack or a distributed denial-of-service attack;

(d) use any of the Service to commit any fraud or fraudulent activity;

(e) except as expressly permitted by this Agreement and as may be allowed by any applicable law which cannot be excluded, attempt to reverse compile, disassemble, reverse engineer or otherwise reduce to human-perceivable form, all or any part of the Software Platform, or copy, modify, translate, duplicate, create derivative works from, frame, mirror, republish, download, display, transmit, or distribute all or any part of the Service in any form or media or by any means (including by using any robot, spider or other automated device or manual process);

(f) access any part of the Service in order to build a product or service which competes with any of the Services; or

(g) license, sell, rent, lease, transfer, assign, distribute, display, disclose or otherwise commercially exploit, or otherwise make any of the Services available to any third party except the Authorised Users, or use any of the Service to process data on behalf of third parties.

5.4 The Customer shall use all reasonable endeavours to prevent any unauthorised access to, or use of, the Service and, in the event of becoming aware of any such unauthorised access or use, shall immediately notify the Supplier and shall provide to the Supplier all assistance that it reasonably requires to prevent such unauthorised access or use.

6 Payment

6.1 The Customer will purchase campaign credits via the Website in advance, unless otherwise stated in communication with the Supplier. The Customer shall make payments using credit/debit card payment online via Stripe.

6.2 The Subscription Fees are payable in either US Dollars (USD) or Euros (EUR).

6.3 If the payment is reversed or cleared funds have not arrived in the Supplier account, the Supplier may, without prejudice to any other rights and remedies it may have, without liability, on providing written notice to the Customer:

(a) disable and suspend the Customer’s access to and/or use of all or part of the Service during such time as the invoice(s) concerned remain unpaid; and

(b) charge the Customer interest on a daily basis in respect of the overdue amount at an annual rate equal to 3% over the US base rate from time to time, commencing on the due date and continuing until payment of the overdue amount is received in full by the Supplier, whether before or after judgment.
6.4 All sums payable under this Agreement shall be paid in full without any deduction, discount, set off or abatement, except as required by law.

7 Intellectual Property Rights

7.1 The Customer acknowledges and agrees that the Supplier and/or its licensors own all Intellectual Property Rights in and to the Services, and any modifications and enhancements made thereto. Except as expressly stated herein, this Agreement, does not grant the Customer any right, title, licence or interest in or to any Intellectual Property Rights of the Supplier or its licensors.

7.2 The Supplier acknowledges and agrees that the Customer owns the Customer Data. The Customer hereby grants a royalty-free, worldwide licence to the Supplier to use the Customer Data (and any Intellectual Property Rights subsisting therein), and where required the Customer’s name and logo, for the sole purpose of providing the Services to the Customer. The Customer grants the Supplier the right to use the Customer’s name and logo on the Supplier’s website and in any marketing and promotional material (including press releases).

8 Confidentiality

8.1 Each party may access or receive the other party’s Confidential Information in order to perform its obligations under this Agreement or otherwise in connection with this Agreement.

8.2 A party’s Confidential Information shall not be deemed to include any information that:

(a) is or becomes publicly known other than through any act or omission of the receiving party;

(b) was in the receiving party’s lawful possession before the disclosure;

(d) is independently developed by the receiving party, which independent development can be shown by written evidence; or

(e) is required to be disclosed by law, by any court of competent jurisdiction or by any regulatory or administrative body.

8.3 Each party shall hold the other party’s Confidential Information in strict confidence and, unless required by law, not make the other party’s Confidential Information available to any third party or use the other party’s Confidential Information for any purpose other than the performance of its obligations under this Agreement.

8.4 Each party shall take all reasonable steps to ensure that the other party’s Confidential Information to which it has access is not disclosed or distributed by its employees or agents in violation of the terms of this Agreement.

8.5 Neither party shall be responsible for any loss, destruction, alteration or disclosure of the other party’s Confidential Information caused by any third party (other than its employees or agents or sub-contractors).

8.6 The Customer acknowledges and agrees that all information relating to the Services (including the results of any performance tests of the Services) constitutes the Supplier’s Confidential Information, and the Supplier acknowledges and agrees that the Customer Data is the Confidential Information of the Customer.

8.7 No party shall make, or permit any person to make, any public announcement concerning this Agreement without the prior written consent of the other party (such consent not to be unreasonably withheld or delayed), except as required by law, any governmental or regulatory authority (including, without limitation, any relevant securities exchange), any court or other authority of competent jurisdiction.

8.8 The above provisions of this clause 9 shall survive termination of this Agreement, however arising.

9 Indemnity

9.1 The Customer shall defend, indemnify and hold harmless the Supplier against all claims, actions, proceedings, losses, damages, expenses and costs (including without limitation court costs and reasonable legal fees) arising out of or in connection with the Supplier’s use of the Customer Data or Customer’s intellectual property in accordance with clause 8.3 or a breach by the Customer and/or any Authorised User of the obligations set out in clause 6.

9.2 The Supplier shall defend the Customer against any claim that the Customer’s use of the Services in accordance with this Agreement infringes any registered Intellectual Property Rights of a third party (IP Claim), and shall indemnify the Customer for any losses, damages, expenses and costs (including court costs and reasonable legal fees) which are awarded against the Customer or which the Customer is required to pay by a court in respect of any such IP Claim. Liability under this indemnity is conditional upon the indemnified party discharging the following obligations. If any third party makes a claim, or notifies an intention to make a claim, against the Customer which may reasonably be considered likely to give rise to a liability under the indemnity (a Claim), the Customer shall:

(a) as soon as reasonably practicable, give written notice of the Claim to the Supplier specifying the nature of the Claim in reasonable detail;

(b) not make any public statement, admission of liability, agreement and/or compromise in relation to the Claim without the prior written consent of the Supplier;

(c) provide to the Supplier and its professional advisers all reasonable assistance and co-operation in the defence and settlement of the Claim, at the Supplier’s cost; and

(d) be deemed to have given to the Supplier (to the fullest extent possible) sole authority and conduct to avoid, dispute, compromise and/or defend the Claim.

9.3 In the defence or settlement of any IP Claim, the Supplier may procure the right for the Customer to continue using the Services, replace or modify the Services so that they become non-infringing (without adversely affecting the functionality of the Services) or, if such remedies are not reasonably available, terminate this Agreement, without liability, on providing written notice to the Customer, in which case, the Supplier (where applicable) refund any Campaign Credits paid in advance by the Customer.

9.4 In no event shall the Supplier be liable to the Customer under the indemnity contained in clause 9.2 to the extent that the IP Claim arises as a result of:

(a) a modification to the Service by any person other than the Supplier; or

(b) the Customer’s use of the Service other than in accordance with this Agreement and any instructions given to the Customer by the Supplier from time to time; or

(c) the Customer’s use of the Services after it has given notice of the alleged or actual infringement to the Supplier under clause 10.3(a).

9.5 This clause 10 sets out the Supplier’s entire obligations and liability in respect of any IP Claim.

10 Limitation of liability

10.1 This clause 11 sets out the entire financial liability of the Supplier (including any liability for the acts or omissions of its employees, agents and subcontractors) to the Customer:

arising under or in connection with this Agreement;
in respect of any use made by the Customer of the Service or any part of them; and
in respect of any representation, statement or tortious act or omission (including negligence) arising under or in connection with this Agreement.

10.2 Subject to clause 10.3, and save as expressly and specifically provided in this Agreement:

(a) the Customer assumes sole responsibility for results obtained and conclusions drawn from the use of the Services by the Customer, and for assessing whether the Service meets its requirements. The Supplier gives no warranty or representation that the Service will meet the Customer’s requirements. The Supplier shall have no liability for any damage caused by errors or omissions in any information or instructions provided by the Customer to the Supplier in connection with the Service, or any actions taken by the Supplier at the Customer’s direction;

(b) the Supplier gives no warranty or representation that the use of the Software Platform will be uninterrupted, available or error free. The Software Platform is provided on a “as is” basis and all warranties, representations, conditions and all other terms of any kind whatsoever implied by statute or common law are, to the fullest extent permitted by applicable law, excluded from this Agreement, including the implied conditions, warranties or other terms as to satisfactory quality and fitness for purpose;

(c) the Supplier shall have no liability for any delays, delivery failures, or any other loss or damage resulting from the transfer of data over communications networks and facilities, including the internet, and the Customer acknowledges that the Service may be subject to limitations, delays and other problems inherent in the use of such communications facilities; and

(d) the Supplier shall have no liability or responsibility for any fault, failure or unavailability of the Software Platform caused by the Customer’s system, any third party software, or as a result of any fault, failure, unavailability, speed or limitations of the Customer’s internet and network communications, computer equipment and/or web browser.

10.3 Nothing in this Agreement excludes the liability of the Supplier:

(a) for death or personal injury caused by the Supplier’s negligence; or

(b) for fraud or fraudulent misrepresentation; or

10.4 Subject to clause 10.3, the Supplier shall not be liable whether in contract, tort (including negligence or breach of statutory duty), misrepresentation, restitution or otherwise for any: loss of profits; loss of sales or business; loss of agreements or contracts; loss of anticipated savings; loss of opportunity; loss of goodwill; loss of use or corruption of software, data or information; or any special, indirect, consequential or pure economic loss, costs, damages, charges or expenses howsoever arising under this Agreement.

10.5 Subject to clause 10.3, the Supplier’s total aggregate liability in contract, tort (including negligence or breach of statutory duty), misrepresentation, restitution or otherwise, arising in connection with the performance of this Agreement, including under any indemnity, in any year, shall not exceed the total Subscription Fees paid by the Customer to the Supplier during the previous year.

11 Term and termination

11.1 Access to the platform will being on the date of purchase and will last for 180 days.

11.2 This Agreement shall, unless terminated earlier in accordance with its terms, provide uninterrupted access to the portal for this period in order for the Customer to create and schedule phishing simulation campaigns..

11.3 Without affecting any other right or remedy available to it, the Supplier may terminate this Agreement with immediate effect by giving written notice to the Customer if: (a) the Customer fails to pay any amount due under this Agreement on the due date for payment and remains in default not less than 30 days after being notified in writing by the Supplier to make such payment; or (b) the Customer commits a breach of clause 6.3; or (c) there is a change of Control of the Customer.

11.4 On termination of this Agreement for any reason:

(a) all licences granted under this Agreement shall immediately terminate, the Supplier shall disable the Customer’s access to the Service, and the Customer shall immediately cease using the Service;

(b) each party shall return and make no further use of any equipment, property, Confidential Information, Documentation and other items (and all copies of them) belonging to the other party; and

(d) any rights, remedies, obligations or liabilities of the parties that have accrued up to the date of termination, including the right to claim damages in respect of any breach of the Agreement which existed at or before the date of termination, and the continuation after termination of any provision expressly stated to survive or implicitly surviving termination, shall not be affected or prejudiced.

11.5 Following termination of this Agreement, the Supplier may delete all Customer Data without liability to the Customer. The Customer may download a copy of the Customer Data from the Software Platform at any time during the Agreement, At the Customer’s request, the Supplier will assist the Customer in downloading such Customer Data from the Software Platform and may charge the Customer for such assistance.

12 Force majeure

The Supplier shall have no liability to the Customer under this Agreement if it is prevented from or delayed in performing its obligations under this Agreement, or from carrying on its business, by any act, event, omission or accident beyond its reasonable control, including: strikes, lock-outs or other industrial disputes (whether involving the workforce of the Supplier or any other party); failure of a utility service or transport or telecommunications network; act of God; war, threat of or preparation for war or armed conflict; riot, civil commotion, terrorist attack or malicious damage; imposition of sanctions, embargo, breaking off of diplomatic relations or similar actions; compliance with any law or governmental order, rule, regulation or direction; collapse of building structures, accident, breakdown of plant or machinery; flood, storm, earthquake or other adverse weather conditions or natural disaster; fire or explosion; epidemic or pandemic; nuclear, chemical or biological contamination; sonic boom; or default of suppliers or subcontractors.

13 Conflict

If there is an inconsistency between any of the provisions in the main body of this Agreement and the Schedules, the provisions in the main body of this Agreement shall prevail.

14 Variation

No variation of this Agreement shall be effective unless it is in writing and signed by the parties or their authorised representatives (including by electronic signature).

15 Waiver

No failure or delay by a party to exercise any right or remedy provided under this Agreement or by law shall constitute a waiver of that or any other right or remedy, nor shall it prevent or restrict the further exercise of that or any other right or remedy. No single or partial exercise of such right or remedy shall prevent or restrict the further exercise of that or any other right or remedy.

16 Rights and remedies

Except as expressly provided in this Agreement, the rights and remedies provided under this Agreement are in addition to, and not exclusive of, any rights or remedies provided by law.

17 Severance

17.1 If any provision (or part of a provision) of this Agreement is found by any court or administrative body of competent jurisdiction to be invalid, unenforceable or illegal, the other provisions shall remain in force.

17.2 If any invalid, unenforceable or illegal provision would be valid, enforceable or legal if some part of it were deleted, the provision shall apply with whatever modification is necessary to give effect to the commercial intention of the parties.

18 Entire agreement

18.1 This Agreement, and any documents referred to in it, constitutes the whole agreement between the parties and supersedes any previous arrangement, understanding or agreement between them relating to the subject matter they cover.

18.2 Each of the parties acknowledges and agrees that in entering into this Agreement it does not rely on any undertaking, promise, assurance, statement, representation, warranty or understanding (whether in writing or not) of any person (whether party to this agreement or not) relating to the subject matter of this Agreement, other than as expressly set out in this Agreement.

19 Assignment

19.1 The Customer shall not, without the prior written consent of the Supplier, assign, transfer, charge, sub-contract or deal in any other manner with all or any of its rights or obligations under this Agreement. The Supplier may at any time assign, transfer, charge, sub-contract or deal in any other manner with all or any of its rights or obligations under this Agreement.

29 Notices

Any notice, including notice of termination, required to be given to a party under this Agreement shall be in writing via email to: (i) the Customer at the nominated contact set out in the Software Platform; and (ii) the Supplier via the website live chat, or other contact whose details have been provided by that party for the purpose of receiving notices under this Agreement. Notices shall be deemed to have been delivered one Business Day after transmission in the case of email (provided that no delivery failure notification is received by the sender).