Terms of Service

Effective date: 13 July 2026

1. About these Terms

These Terms of Service govern access to and use of Angvlar Security Awareness, a business-to-business security awareness, training and authorised phishing simulation platform operated by Angvlar SRL (“Angvlar”, “we”, “us”).

Angvlar SRL is identified by EU VAT ID RO40474720, CUI 40331941, D-U-N-S Number 52-539-4231, with its registered address at str. Vidraru 1-3, bl. C6, sc. 1, ap. 55, Romania.

These Terms apply together with the applicable order form, service agreement, authorisation documents, campaign addenda, Data Processing Agreement and any other written agreement between Angvlar and the customer. If there is a conflict, the signed customer agreement prevails for that customer.

2. Eligibility and authorised business use

The service is available only to organisations and authorised representatives acting for legitimate internal security awareness, training, audit and risk-reduction purposes. By using the service, you confirm that you have authority to act for the relevant organisation and to bind it to the applicable agreement.

The platform must not be used for public targeting, personal campaigns, unauthorised impersonation, credential harvesting, malware delivery, evasion, exploitation or any activity outside an expressly approved scope.

3. Customer responsibilities

• Provide accurate legal, contact, domain and campaign information.
• Obtain all internal approvals and lawful grounds required for the planned training or simulation.
• Use only verified domains, authorised simulation domains and approved recipient groups.
• Maintain appropriate notices, employee policies and labour-law consultation where required.
• Keep account credentials secure and promptly deactivate users who no longer require access.
• Review campaign content and ensure it does not exceed the signed scope.

4. Safety gates and platform controls

Campaigns may be blocked, paused or cancelled when legal, technical, DNS, tenant, permission, audience or authorisation checks are incomplete or no longer valid. Angvlar may immediately suspend activity that presents a security, legal, privacy or reputational risk.

The platform is designed not to store passwords, one-time authentication codes, payment-card data, banking credentials, identity documents, access tokens or other secrets entered into a simulated page. Only privacy-conscious educational events may be recorded.

5. Accounts and access

Access is role-based and tenant-restricted. Customers are responsible for actions performed through their authorised accounts, except to the extent caused by Angvlar’s breach of its own obligations. Sharing accounts or attempting to access another tenant is prohibited.

6. Intellectual property

Angvlar and its licensors retain all rights in the platform, software, interface, documentation, global templates and branding. Customers retain rights in their own content, trademarks and uploaded materials and grant Angvlar a limited licence to process them only to provide, secure and support the contracted service.

7. Availability, changes and support

Angvlar may maintain, update or improve the service and may make reasonable changes required for security, legal compliance or reliability. Specific service levels, support commitments and commercial terms apply only when stated in a signed agreement.

8. Fees and taxes

Fees, payment terms, currency and applicable taxes are defined in the applicable commercial agreement or invoice. Unless otherwise agreed, fees are non-refundable once the relevant service period or professional work has begun.

9. Confidentiality

Each party must protect the other party’s confidential information using reasonable care and use it only for the agreed purpose. Confidentiality obligations do not apply to information that is public without breach, independently developed, lawfully received from another source or required to be disclosed by law.

10. Suspension and termination

Angvlar may suspend access for material breach, non-payment, unsafe use, missing authorisation, attempted circumvention of safeguards or a credible risk to individuals, systems or third parties. On termination, access ends and data is retained, exported, anonymised or deleted in accordance with the agreement, applicable law and configured retention rules.

11. Warranties and liability

The service is a risk-reduction and training tool and does not guarantee that all attacks will be prevented or detected. To the maximum extent permitted by law, liability limitations and exclusions are those stated in the signed customer agreement. Nothing in these Terms excludes liability that cannot legally be excluded.

12. Governing terms

The governing law, courts and dispute procedure are specified in the signed customer agreement. Where no such provision exists, Romanian law applies, without prejudice to mandatory rights that cannot be contractually excluded.

13. Contact

Questions about these Terms may be submitted through the contact details included in the relevant agreement or through the public Contact page.