Terms of Service

1. Definitions

In these Terms, the following definitions apply:

• “Platform” means the CyberSek security awareness training software accessible at cybersek.in and any associated mobile applications, APIs, or tools.
• “Services” means the security awareness training platform, VAPT services, policy management tools, compliance reporting features, and any other services provided by CyberSek.
• “Administrator” means a user who has registered an organisational account and has the ability to manage Learners, assign training, upload policies, and access compliance reports.
• “Learner” means an employee or individual invited by an Administrator to complete training on the Platform.
• “Subscription” means a paid plan (currently “Boost”) providing access to the full feature set of the Platform for a defined number of seats and billing period.
• “Customer Content” means any data, documents, policies, information, or materials uploaded by you or your Learners to the Platform, including policy documents and employee information.
• “CyberSek Content” means all training modules, course videos, assessments, certificates, platform interfaces, software, documentation, and all other content owned or licensed by CyberSek.

2. Account Registration and Eligibility

2.1 Eligibility

You must be at least 18 years of age and have the legal capacity to enter into binding contracts to register for and use the Platform. The Platform is intended for use by organisations and businesses, not individuals for personal use.

2.2 Account Information

You agree to provide accurate, current, and complete information during registration and to keep your account information updated. You are responsible for maintaining the confidentiality of your account credentials and for all activity that occurs under your account. Notify us immediately at director@cybersek.in if you suspect unauthorised access to your account.

2.3 One Account per Organisation

Each organisation may maintain one Administrator account. Creating multiple accounts to circumvent seat limits, free trial restrictions, or other platform policies is prohibited and may result in termination of all associated accounts.

3. Free Trial

CyberSek offers a 7-day free trial upon account creation. The free trial provides access to a limited feature set including one course preview and up to 20 Learner invitations. No credit card is required to start a free trial.

At the end of the trial period, your account will transition to a read-only state. Your data, certificates, and records will be preserved. You may upgrade to a paid Subscription at any time to restore full access. CyberSek reserves the right to modify or discontinue the free trial offering at any time without prior notice.

4. Subscriptions and Payment

4.1 Subscription Plans

The Boost plan is a paid subscription providing access to all features of the Platform for a specified number of learner seats. Pricing is based on the number of seats and billing cycle (monthly or annual) selected at the time of purchase. Volume discounts apply automatically at 50, 200, and 500+ seats. Current pricing is displayed at cybersek.in/pricing.

4.2 Payment Processing

All payments are processed by Razorpay Payment Solutions Private Limited, a licensed payment aggregator regulated by the Reserve Bank of India. By making a payment, you also agree to Razorpay’s Terms of Service and Privacy Policy. CyberSek does not store your full card details.

Payments are accepted via UPI, credit cards, debit cards, net banking, and supported digital wallets. All amounts are in Indian Rupees (INR) unless otherwise stated.

4.3 Billing and Renewal

Monthly subscriptions renew automatically at the end of each monthly billing period. Annual subscriptions are billed upfront for the full 12-month period and renew annually. You authorise CyberSek to charge the payment method on file for each renewal unless you cancel before the renewal date.

4.4 Seat Adjustments

You may add learner seats at any time during your subscription period. Additional seats are charged on a pro-rated basis for the remainder of the current billing period. Seat reductions take effect at the next billing renewal.

4.5 Taxes

All prices are exclusive of applicable taxes unless stated otherwise. Goods and Services Tax (GST) and any other applicable taxes will be added to your invoice as required by Indian law. You are responsible for all taxes applicable to your use of the Services.

4.6 Late Payments

If a payment fails, we will notify you and attempt to collect payment. If payment remains outstanding for more than 14 days following the due date, CyberSek may suspend your account until the outstanding amount is settled. Access to your data will be restored upon successful payment.

5. Cancellation and Refunds

5.1 Cancellation

You may cancel your Subscription at any time by contacting us at director@cybersek.in or through your account settings (where available). Cancellation takes effect at the end of the current billing period. You will retain full access to the Platform until that date.

5.2 Refund Policy

CyberSek operates a limited refund policy:

• Annual subscriptions: If you cancel within 7 days of the initial purchase or annual renewal date and have not made substantial use of the platform (defined as less than 10% of your Learners having completed any training), you may request a pro-rated refund for the unused months.
• Monthly subscriptions: No refunds are provided for the current billing month. Your subscription remains active until the end of the billing period.
• Technical failures: If the Platform experiences a material service outage of more than 48 continuous hours within a billing month due to CyberSek’s fault, you may request a credit for the affected period.

Refund requests must be submitted to director@cybersek.in within 14 days of the qualifying event. Approved refunds will be processed within 7-10 business days to your original payment method.

5.3 Data Following Cancellation

Following cancellation, your account data — including Learner records, completion certificates, and policy acknowledgements — will be retained for 90 days in read-only format. You may export your data during this period. After 90 days, data may be permanently deleted. CyberSek is not responsible for data loss due to failure to export before deletion.

6. Acceptable Use

6.1 Permitted Use

You may use the Platform solely for your organisation’s internal purposes — specifically, to deploy security awareness training to your employees and to generate compliance evidence for your organisation’s regulatory and audit requirements.

6.2 Prohibited Activities

You agree not to, and not to permit others to:

• Resell, sublicense, or otherwise make the Platform available to third parties outside your organisation without CyberSek’s written permission.
• Use the Platform to train employees of client organisations without a separate agreement with CyberSek.
• Reverse engineer, decompile, disassemble, or attempt to extract the source code of the Platform or CyberSek Content.
• Use automated tools, scripts, bots, or crawlers to scrape or extract data from the Platform.
• Upload malicious code, viruses, or any content that could damage, disable, or impair the Platform or other users’ systems.
• Attempt to gain unauthorised access to any part of the Platform, other accounts, or CyberSek’s infrastructure.
• Use the Platform in any way that violates applicable law, including privacy laws, intellectual property laws, or regulations governing the use of personal data.
• Misrepresent completion data, fabricate training records, or use the Platform to generate false compliance evidence.
• Remove, alter, or obscure any proprietary notices, labels, or branding on the Platform or CyberSek Content.

7. Intellectual Property

7.1 CyberSek Content

All training modules, course videos, assessments, platform software, user interfaces, documentation, logos, trademarks, and all other materials created by CyberSek are the exclusive property of CyberSek Private Limited and are protected by copyright, trademark, and other intellectual property laws. Nothing in these Terms grants you any ownership rights in CyberSek Content.

Subject to these Terms and your Subscription, CyberSek grants you a limited, non-exclusive, non-transferable licence to access and use CyberSek Content solely for the purpose of delivering training to your Learners.

7.2 Customer Content

You retain all ownership rights in Customer Content you upload to the Platform. By uploading Customer Content, you grant CyberSek a limited, non-exclusive licence to store, process, and display that content solely as necessary to provide the Services to you. CyberSek does not claim any ownership rights in your Customer Content and will not use it for any purpose beyond service delivery.

7.3 Feedback

If you provide suggestions, feedback, or ideas about the Platform or Services, you grant CyberSek a perpetual, irrevocable, royalty-free licence to use such feedback for any purpose, including improving the Platform, without any obligation to compensate you.

8. Confidentiality

Each party agrees to keep the other’s confidential information strictly confidential and not to disclose it to any third party without prior written consent, except as required by law or as necessary to perform obligations under these Terms. Confidential information includes, but is not limited to, business plans, technical data, pricing information, and Customer Content. This obligation survives termination of these Terms for a period of 3 years.

9. Data Processing and Privacy

CyberSek’s collection and use of personal data is governed by our Privacy Policy, which is incorporated into these Terms by reference. By using the Platform, you agree to the practices described in our Privacy Policy.

As an Administrator, you are responsible for ensuring that you have the appropriate legal basis to collect and share employee personal data with CyberSek, including obtaining any required consent or notification under applicable data protection law (including India’s DPDPA 2023) before inviting Learners to the Platform.

For enterprise customers requiring a formal Data Processing Agreement (DPA) for GDPR or DPDPA compliance purposes, please contact us at director@cybersek.in.

10. Compliance Evidence Disclaimer

CyberSek generates training completion records, certificates, and policy acknowledgement logs that are designed to support your organisation’s compliance documentation requirements. However, CyberSek does not certify, guarantee, or represent that use of the Platform will result in compliance with any specific regulation, standard, or legal requirement.

Compliance with ISO 27001, GDPR, HIPAA, PCI DSS, NIS2, SOC 2, DPDPA, or any other framework depends on many factors beyond employee training, including your technical controls, policies, governance, and the requirements of the specific standard or regulation as assessed by an authorised auditor or regulator. CyberSek provides the training and documentation layer only. You are responsible for your organisation’s overall compliance posture.

11. Service Availability and SLA

CyberSek aims to provide platform availability of 99.5% per calendar month, excluding scheduled maintenance and force majeure events. We will provide advance notice of scheduled maintenance where possible.

In the event of unplanned downtime exceeding 48 consecutive hours in a calendar month due to CyberSek’s fault, affected Subscribers may request a service credit equal to 5% of the monthly fee for each 24-hour period of excess downtime, up to a maximum of 30% of the monthly fee. Credits are the sole remedy for service availability failures and will not exceed the fees paid for the affected month.

CyberSek does not guarantee that the Platform will be error-free or uninterrupted. We reserve the right to modify, update, or discontinue features of the Platform with reasonable notice.

12. Third-Party Services

The Platform integrates with third-party services including Razorpay (payments), Supabase (infrastructure), Cloudflare (CDN and storage), Resend (email), and Vercel (hosting). CyberSek is not responsible for the availability, performance, or practices of these third-party services. Your use of third-party services integrated with the Platform may be subject to those parties’ terms and conditions.

13. Limitation of Liability

To the maximum extent permitted by applicable law:

• CyberSek’s total aggregate liability to you arising out of or related to these Terms or the Services, whether in contract, tort, or otherwise, shall not exceed the total fees paid by you to CyberSek in the 12 months immediately preceding the claim.
• CyberSek shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to loss of profits, loss of data, loss of business, or loss of goodwill, even if CyberSek has been advised of the possibility of such damages.
• CyberSek shall not be liable for any failure or delay in performance caused by circumstances beyond its reasonable control, including acts of God, natural disasters, government actions, internet or infrastructure failures, or third-party service outages.

Some jurisdictions do not allow the exclusion of certain warranties or limitation of liability. In such jurisdictions, CyberSek’s liability will be limited to the fullest extent permitted by law.

14. Indemnification

You agree to indemnify, defend, and hold harmless CyberSek, its directors, officers, employees, and agents from and against any claims, liabilities, damages, losses, and expenses (including reasonable legal fees) arising out of or related to: (a) your use of the Platform in violation of these Terms; (b) your violation of any applicable law or regulation; (c) any Customer Content you upload to the Platform; or (d) your infringement of any third-party intellectual property, privacy, or other rights.

15. Warranties and Disclaimers

CyberSek warrants that the Platform will function materially in accordance with its documentation during your Subscription period, and that we will implement industry-standard security measures to protect your data as described in our Privacy Policy.

EXCEPT AS EXPRESSLY STATED IN THESE TERMS, THE PLATFORM AND SERVICES ARE PROVIDED “AS IS” AND “AS AVAILABLE” WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT.

CyberSek does not warrant that the Platform will meet your specific compliance requirements or that its use will result in certification under any standard or framework.

16. Termination

16.1 Termination by You

You may terminate your account at any time by contacting us at director@cybersek.in. Termination of a paid Subscription will take effect at the end of the current billing period, subject to the refund policy in Section 5.

16.2 Termination by CyberSek

CyberSek may suspend or terminate your account immediately, with or without notice, if: (a) you materially breach these Terms and fail to remedy the breach within 10 days of written notice; (b) you use the Platform in a way that poses a security risk to CyberSek or other users; (c) you fail to pay amounts due; or (d) we are required to do so by applicable law.

16.3 Effect of Termination

Upon termination, your right to access the Platform ceases immediately. Sections 7 (Intellectual Property), 8 (Confidentiality), 13 (Limitation of Liability), 14 (Indemnification), 17 (Governing Law), and 18 (Dispute Resolution) survive termination.

17. Governing Law

These Terms are governed by and construed in accordance with the laws of India, without regard to its conflict of law principles. The courts of Bangalore, Karnataka shall have exclusive jurisdiction over any disputes arising out of or relating to these Terms or your use of the Platform, and you consent to the personal jurisdiction of such courts.

18. Dispute Resolution

In the event of any dispute, the parties agree to first attempt to resolve it through good-faith negotiations for a period of 30 days following written notice of the dispute. If the dispute cannot be resolved through negotiation, it shall be referred to and finally resolved by arbitration under the Arbitration and Conciliation Act 1996 of India. The seat of arbitration shall be Bangalore, Karnataka. The arbitration shall be conducted in English before a sole arbitrator appointed by mutual agreement of the parties.

19. Modifications to Terms

CyberSek reserves the right to modify these Terms at any time. For material changes, we will provide at least 14 days’ prior notice by email to the Administrator’s registered email address and by displaying a prominent notice on the Platform. Non-material changes (such as corrections, clarifications, or additions of new features) may take effect immediately upon posting.

Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the revised Terms. If you do not agree to the revised Terms, you must stop using the Platform and cancel your Subscription before the effective date.

20. General

• Entire Agreement: These Terms, together with our Privacy Policy and any order forms or Subscription confirmations, constitute the entire agreement between you and CyberSek regarding the Services and supersede all prior agreements, representations, and understandings.
• Severability: If any provision of these Terms is found to be unenforceable or invalid, that provision will be limited or eliminated to the minimum extent necessary, and the remaining provisions will continue in full force and effect.
• No Waiver: CyberSek’s failure to enforce any right or provision of these Terms will not be considered a waiver of that right or provision.
• Assignment: You may not assign or transfer these Terms, or any rights or obligations hereunder, without CyberSek’s prior written consent. CyberSek may assign these Terms freely in connection with a merger, acquisition, or sale of assets.
• Notices: All notices under these Terms shall be in writing and sent to director@cybersek.in (for CyberSek) or the Administrator’s registered email (for the Customer).
• Language: These Terms are written in English. In the event of any conflict between an English version and a translated version, the English version shall prevail.

21. Contact

For any questions about these Terms, please contact us: