Legal

Terms of Service

Last updated: 4 April 2026

Welcome to SecureAZ. Please read these Terms of Service ("Terms") carefully before using any website, platform, or service operated by SecureAZ Limited ("SecureAZ", "we", "us", or "our"), including the SecureAZ marketing websites and the customer application platforms at app.secureaz.com and app.secureaz.co.nz (collectively, the "Platforms"). By accessing or using the Platforms or any SecureAZ service, you agree to be legally bound by these Terms in their entirety.

1. Acceptance of Terms

By accessing or using the Platforms or any SecureAZ service, you ("User", "you", or "your") agree to be legally bound by these Terms in their entirety. If you do not agree, you must immediately cease use of the Platforms and all SecureAZ services.

These Terms govern all services provided by SecureAZ, including but not limited to cyber awareness training, phishing simulation campaigns, penetration testing, cyber health check tools, and any related services (collectively, the "Services").

Where you are accepting these Terms on behalf of a company or other legal entity ("Client Organisation"), you represent and warrant that you have the authority to bind that entity and its affiliates to these Terms.

2. Description of Services

SecureAZ provides cyber security awareness and training services to businesses. The specific services available to you will depend on your subscription plan or agreed scope of work, and may include:

  • Cyber security awareness training modules delivered via the App
  • Phishing simulation campaigns targeting your employees or designated users
  • Penetration testing services (subject to separate written agreement)
  • Cyber health check tools and assessments
  • Management reporting and compliance documentation

SecureAZ reserves the right to modify, suspend, or discontinue any part of the Services at any time with reasonable notice to you.

3. Licence and Restrictions

Subject to your compliance with these Terms, SecureAZ grants you a limited, non-exclusive, non-transferable, revocable licence to access and use the Platforms solely for your internal business purposes.

You must not:

  • Copy, modify, distribute, sell, or lease any part of the Platforms or Services
  • Reverse engineer, decompile, or attempt to extract source code from the Platforms
  • Use the Platforms to store or transmit infringing, libellous, obscene, or otherwise unlawful material
  • Use the Platforms to store or transmit malicious code
  • Interfere with or disrupt the integrity or performance of the Platforms
  • Mine data from the Platforms using automated means without express written consent
  • Resell, sublicence, or otherwise commercialise access to the App without written agreement
  • Use credentials belonging to another user to access the App
  • Share login credentials with unauthorised parties
  • Impersonate SecureAZ, its employees, or any other person or entity

SecureAZ reserves the right to revoke this licence and suspend or terminate your access at any time, without notice, for any breach of these Terms.

4. App Platform — User Accounts

4.1 Account Registration

Access to the App requires registration of a user account. You agree to provide accurate, current, and complete information during registration and keep it updated. You are responsible for maintaining the confidentiality of your login credentials and must notify SecureAZ immediately of any unauthorised access to your account.

4.2 Account Responsibility

You are responsible for all activities that occur under your account. SecureAZ is not liable for any loss or damage arising from your failure to maintain account security.

4.3 Administrator Accounts

Where you are given administrator access, you are responsible for managing user permissions and access within your organisation's account. You must ensure that only authorised individuals are granted access to the App.

5. Services — Awareness Training

5.1 Employer Responsibilities for Training

If you are deploying training on behalf of a Client Organisation, you warrant that:

  • You have obtained all necessary consents, authorisations, and approvals required under applicable employment agreements, privacy laws, and workplace policies before deploying training to employees or third parties
  • You have notified employees or participants of monitoring or tracking associated with training completion to the extent required by law
  • You will not use training results or completion data to unlawfully disadvantage, discipline, or dismiss employees without proper process
  • SecureAZ bears no responsibility for any employment, legal, or regulatory consequences arising from your use of training data or results

6. Services — Phishing Simulations

6.1 Nature of Phishing Simulation Services

SecureAZ provides phishing simulation services, which involve sending simulated (non-malicious) phishing emails and other social engineering communications to employees or users designated by you, for the purpose of testing and improving awareness of phishing threats.

6.2 Client Authorisation and Responsibility

By engaging phishing simulation services, you represent and warrant that:

  • You are authorised to deploy simulations targeting the individuals and systems you have designated
  • You have obtained all necessary consents and authorisations required by applicable law, including employment agreements and privacy legislation
  • You will indemnify and hold harmless SecureAZ from any claims arising from simulations conducted under your authorisation

6.3 Employee Complaints and Distress

You acknowledge that phishing simulations can cause stress, embarrassment, or distress to recipients. You agree that:

  • SecureAZ bears no liability for any psychological distress, emotional harm, or adverse consequences experienced by any employee or recipient arising from a simulation
  • Any employee complaints, grievances, or legal claims arising from simulations are your sole responsibility
  • SecureAZ recommends (but does not require) that you inform employees in general terms that security testing may occur, without disclosing specific timing or methods

7. Fees and Payment

7.1 Fees

Fees payable for the Services are as set out in the applicable proposal, quote, order form, or subscription page provided by SecureAZ. Unless otherwise agreed in writing, all fees are stated in New Zealand Dollars (NZD) and are exclusive of GST, which will be added where applicable.

7.2 Invoicing and Payment Terms

Unless otherwise agreed in writing, invoices are due for payment within fourteen (14) days of the date of invoice. SecureAZ may charge interest on overdue amounts at a rate of 1.5% per month or the maximum rate permitted by law, whichever is lower.

7.3 Suspension for Non-Payment

SecureAZ may suspend access to the Platforms and Services, without liability, if payment is not received by the due date after providing you with 7 days' written notice of the overdue amount.

7.4 Disputed Invoices

If you dispute any invoice in good faith, you must notify SecureAZ in writing within 7 days of receipt. Undisputed amounts remain due and payable by the original due date.

8. Subscriptions and Auto-Renewal

Where Services are provided on a subscription basis:

  • Subscriptions automatically renew at the end of each billing period unless cancelled by you in writing at least 30 days before the renewal date
  • SecureAZ will provide reasonable notice of any changes to subscription fees before renewal
  • Cancellation after renewal takes effect at the end of the then-current billing period — no refunds are provided for partial periods
  • You may upgrade or downgrade your plan at any time — changes take effect at the start of the next billing period unless otherwise agreed

9. Data and Privacy

SecureAZ collects and processes personal information in accordance with our Privacy Policy, which is incorporated into these Terms by reference. By using the Platforms, you agree to the collection and use of your information as described in the Privacy Policy.

Where you provide SecureAZ with personal information about your employees or other third parties in connection with the Services, you warrant that you have all necessary rights and consents to do so under applicable privacy laws, including the New Zealand Privacy Act 2020 and the Australian Privacy Act 1988.

10. Confidentiality

Each party agrees to keep confidential all non-public information received from the other party in connection with the Services ("Confidential Information") and to use such information only for the purposes of these Terms.

Confidential Information does not include information that: (a) is or becomes publicly available through no fault of the receiving party; (b) was already known to the receiving party; (c) is independently developed without reference to the Confidential Information; or (d) is required to be disclosed by law or court order.

11. Uploaded Content

You are solely responsible for all content, data, and materials you upload to the Platforms ("Uploaded Content"). You warrant that Uploaded Content does not infringe any third-party rights and does not contain unlawful, obscene, or otherwise objectionable material. You grant SecureAZ a non-exclusive, royalty-free licence to use the Uploaded Content solely for the purpose of providing the Services to you.

SecureAZ reserves the right to remove or disable access to any Uploaded Content that it reasonably considers to be unlawful, infringing, or otherwise inappropriate, without prior notice.

12. Marketing and Communications

By using the Platforms or submitting your contact details, you consent to receiving marketing communications from SecureAZ. You may opt out at any time by:

  • Clicking the unsubscribe link in any marketing email, or
  • Emailing [email protected] with your opt-out request

Opting out of marketing does not affect transactional or service-related communications.

13. Intellectual Property

All content on the Platforms, including but not limited to text, graphics, logos, icons, training content, simulation templates, software, and data, is the property of SecureAZ Limited or its licensors and is protected by applicable intellectual property laws.

Nothing in these Terms transfers any intellectual property rights to you. You may not use SecureAZ's name, logo, or branding without prior written consent.

14. Disclaimers

The Platforms and Services are provided on an "as is" and "as available" basis without warranties of any kind, either express or implied, including but not limited to implied warranties of merchantability, fitness for a particular purpose, and non-infringement.

SecureAZ does not warrant that:

  • The Platforms will be uninterrupted, error-free, or free from viruses or other harmful components
  • Results obtained from the Services will be accurate, complete, or reliable
  • The Services will meet any specific compliance, insurance, or regulatory requirements

You are responsible for verifying with your insurer, regulator, or compliance team whether SecureAZ's Services meet your specific requirements.

15. Limitation of Liability

To the fullest extent permitted by law, SecureAZ's total liability to you for any claims arising under or in connection with these Terms or the Services shall not exceed the total fees paid by you to SecureAZ in the three (3) months immediately preceding the event giving rise to the claim.

In no event shall SecureAZ be liable for any:

  • Loss of profits, revenue, data, goodwill, or anticipated savings
  • Indirect, consequential, special, or punitive damages
  • Business interruption losses
  • Claims by third parties

This limitation applies even if SecureAZ has been advised of the possibility of such damages.

16. Indemnification

You agree to indemnify and hold harmless SecureAZ Limited and its directors, officers, employees, agents, contractors, and licensors from and against any claims, liabilities, damages, losses, penalties, fines, costs, and expenses (including reasonable legal fees) arising from or related to:

  • Your use of or inability to use the Platforms or Services
  • Your breach of these Terms
  • Your violation of any applicable law or regulation, including privacy, employment, and electronic communications laws
  • Any claim by an employee, contractor, or third party arising from a phishing simulation or training programme conducted under your authorisation
  • Your failure to obtain necessary consents and authorisations before deploying Services
  • Your violation of any third-party rights
  • Any content or information you submit to SecureAZ

17. Term and Termination

These Terms commence on the date you first access the Platforms or agree to them, and continue until terminated. Either party may terminate these Terms on 30 days' written notice. SecureAZ may terminate immediately for material breach, insolvency, or non-payment.

On termination: your access to the Platforms will cease; you must pay all outstanding fees; and both parties' obligations of confidentiality survive. SecureAZ will provide a reasonable opportunity to export your data upon request within 30 days of termination.

18. Governing Law

These Terms are governed by the laws of New Zealand. The parties submit to the non-exclusive jurisdiction of the New Zealand courts. Where you are located in Australia, nothing in these Terms limits your rights under the Australian Consumer Law.

19. Changes to These Terms

SecureAZ may update these Terms from time to time. We will provide at least 14 days' notice of material changes via email or a prominent notice on the Platforms. Your continued use of the Platforms after the effective date of changes constitutes acceptance of the updated Terms.

If you do not agree to the updated Terms, you must stop using the Platforms and notify SecureAZ in writing.

20. Cybersecurity Disclaimer

You acknowledge that:

  • No cybersecurity product, training programme, or phishing simulation can guarantee complete protection against all threats
  • The cybersecurity landscape changes rapidly and SecureAZ's Services may not address all current or emerging threats
  • SecureAZ's training content is designed for general awareness and may not be tailored to your specific industry, regulatory environment, or risk profile
  • Completion of SecureAZ training does not guarantee that your employees will not fall victim to a cyber attack

SecureAZ provides its Services as an educational tool to improve awareness, and makes no guarantee of specific security outcomes.

21. Contact Us

If you have any questions about these Terms, please contact us:

Company: SecureAZ Limited, New Zealand