Terms of service

These terms

These terms are between Fred Oyetayo, trading as Fred Web Studios, of Imperial Way, Thatcham, West Berkshire, RG19 (“we”, “us”), the provider of Lureproof, and the organisation (“you”) that uses it. By connecting a workspace or starting a plan, you confirm you have authority to accept them for your organisation. Questions: hello@lureproof.com.

The service

Lureproof syncs your staff list from Google Workspace or Zoho Workplace, sends practice phishing emails at random working-hour times, shows a short lesson to anyone who clicks, and reports results to administrators. Features marked “soon” on our website aren't part of the service until we release them.

Acceptable use

You agree to:

• Only connect a workspace you're an administrator of, and only include people your organisation is entitled to train.
• Tell staff that phishing simulations are part of their security training (for example in your staff handbook or privacy notice).
• Use results to support people, not to discipline them.
• Follow your email provider's allowlisting steps so practice emails are delivered as intended.

You must not use Lureproof to send real phishing, collect credentials, target anyone outside your organisation, impersonate real third-party brands, or try to get around the service's safety limits. We may suspend accounts that do.

Plans, billing and cancellation

• The Free plan covers up to 5 people. Paid plans are billed monthly in advance at the price shown when you subscribe, in your local currency. Tax is added at checkout where it applies.
• Seat limits apply per plan (Team up to 25 people, Business up to 50).
• You can upgrade, downgrade or cancel at any time from the billing page. Cancelling stops future payments, and your plan stays active until the end of the period you've paid for. We don't give refunds for partial months unless the law requires it.
• If a payment fails, we may limit new campaigns until it's resolved.
• We'll give you at least 30 days' notice of any price change.

Your data

You own your data. We process your employees' personal data as your processor, only on your instructions and as described in our privacy policy. We keep it confidential, protect it with appropriate security, use the sub-processors listed there, help you respond to data subject requests, and tell you without undue delay if we become aware of a personal data breach affecting it. When you close your account, we delete your data on request.

Availability and changes

We work hard to keep Lureproof running, but we don't promise it will be uninterrupted or error-free. We may improve or change the service. If we remove something material to a paid plan, we'll tell you in advance.

Liability

Lureproof is a training tool. It reduces risk, but it can't guarantee your organisation won't be phished or suffer a security incident. To the extent the law allows, we're not liable for indirect or consequential losses, and our total liability in any 12 months is limited to the fees you paid us in that period. Nothing in these terms limits liability for death or personal injury caused by negligence, for fraud, or for anything else that can't be limited by law.

Ending the agreement

You can stop using Lureproof and close your account at any time. We may suspend or end an account that breaches these terms, with notice where it's reasonable to give it.

Governing law

These terms are governed by the law of England and Wales, and the courts of England and Wales have jurisdiction. If we update these terms, we'll change the date at the top and tell customers by email before significant changes take effect.