Terms and Conditions - ThreatLens Security Platform

1. Agreement to Terms

These Terms and Conditions constitute a legally binding agreement between you and ThreatLens governing access to and use of the platform, including simulated email generators, telemetry trackers, and email threat detection APIs.

By accessing or using ThreatLens, you represent that you have the authority to bind your organization and agree to comply strictly with this Acceptable Use Policy and all applicable local, national, and international cybersecurity laws.

2. Permitted Security Testing Scope

ThreatLens is built exclusively for authorized internal defense, employee awareness coaching, and penetration testing:

Mandatory Authorization Notice: You may only conduct phishing simulations and email assessments against email domains and accounts owned by your organization or where you possess explicit, written authorization from the asset owner.

Prohibited activities include but are not limited to:

Dispatching unapproved simulation messages to external third parties or public email providers.
Harvesting sensitive customer credentials, banking data, or personal identification under the guise of security testing.
Bypassing administrative boundaries, rate limits, or abusing the mail sending pipeline for mass unsolicited spam.
Reverse engineering, decompiling, or attempting to discover unauthorized access keys within the platform codebase.

3. Account Security & Access Controls

Users are responsible for safeguarding their login credentials and JWT bearer tokens issued by the authentication service. Any activity performed using an authorized credential will be attributed to that account.

Organizations must promptly revoke credentials for personnel who no longer require administrative access or whose employment has concluded.

4. Intellectual Property & Platform Rights

All rights, title, and interest in and to ThreatLens, including software routines, detection algorithms, heuristic rules, and interface elements, remain the exclusive property of the platform developers.

Organizations retain full ownership of their proprietary security telemetry, email log records, and custom training materials generated through the platform.

5. Limitation of Liability

ThreatLens provides automated threat heuristics and educational simulation tooling on an "as is" and "as available" basis. While detection heuristics are continually updated, no automated system guarantees 100% detection of zero-day exploits or sophisticated social engineering vectors.

To the maximum extent permitted by law, ThreatLens shall not be liable for any indirect, incidental, special, consequential, or punitive damages resulting from employee actions during simulations or third-party unauthorized use.

6. Termination & Suspension

We reserve the right to suspend or terminate access immediately upon detection of activities violating this Acceptable Use Policy, including attempts to target unowned domains or execute malicious spoofing campaigns.

7. Contact & Governance

For inquiries regarding authorized use agreements, licensing, or compliance verification, contact our legal team at legal@threatlens.local.