Legal
Terms of Service
The rules for using the PhishSpot platform.
Last updated: 13 July 2026
Acceptance of terms
By accessing or using PhishSpot, you agree to these Terms of Service on behalf of yourself and the organization you represent. If you do not agree, do not use the service.
The service
PhishSpot is a phishing simulation and security awareness platform operated by DEVTALENTS Sp. z o.o. We may update, improve or change features over time.
Accounts
You are responsible for the accuracy of account information, for keeping credentials secure, and for all activity under your account. Accounts use roles (Admin, Editor, Member) to control access; you are responsible for how you assign them.
Authorized use only
PhishSpot may only be used to run phishing simulations against your own employees or contacts, or people you are explicitly authorized to test. You must have the legal right and internal approval to simulate attacks against every recipient. Using PhishSpot to phish, deceive, harvest credentials from, or attack anyone you are not authorized to test is strictly prohibited and may be unlawful.
Acceptable use
When using the service, you agree that you will not:
- use it for real phishing, fraud, or credential theft;
- target individuals or organizations without authorization;
- upload unlawful, infringing or malicious content;
- attempt to disrupt, reverse-engineer or gain unauthorized access to the platform;
- use the service to violate the privacy or rights of others.
Customer data
You retain ownership of the data you upload. You are the controller of the contact and campaign data you process through PhishSpot; we act as your processor under our Privacy Policy and any data processing agreement.
Intellectual property
PhishSpot, including its software, templates, courses, and branding, is owned by DEVTALENTS Sp. z o.o. and protected by law. We grant you a limited, non-exclusive, non-transferable right to use the service during your subscription. Content you create or upload remains yours.
Fees
Paid plans are billed as agreed in your order or subscription. Pricing is provided on request — contact us for a quote.
Disclaimers
The service is provided "as is" and "as available". We do not warrant that it will be uninterrupted, error-free, or that simulations will reach every inbox. Security awareness reduces risk but does not guarantee prevention of real attacks.
Limitation of liability
To the maximum extent permitted by law, DEVTALENTS Sp. z o.o. is not liable for indirect, incidental, or consequential damages, or for loss of data, profits or business, arising from your use of the service. Nothing in these terms limits liability that cannot be limited by law.
Termination
You may stop using the service at any time. We may suspend or terminate access for breach of these terms, unlawful use, or non-payment. On termination, your right to use the service ends and we will handle your data as described in the Privacy Policy.
Governing law
These terms are governed by the laws of Poland. Disputes are subject to the jurisdiction of the competent courts in Warsaw, Poland, unless mandatory consumer law provides otherwise.
Contact
Questions about these terms? Contact DEVTALENTS Sp. z o.o. at [email protected] or by post at ul. Mazowiecka 11/49, 00-052 Warszawa, Poland.

