CyberArcade – Terms and Conditions

Last Updated: 2025

Welcome to CyberArcade, a cybersecurity awareness gaming platform operated by Innvikta Cybersecurity Solutions ("Company," "we," "us," or "our"). These Terms and Conditions ("Terms") govern your access to and use of the CyberArcade platform and related services ("Platform").

By creating an account, signing in through Microsoft/Office 365 Single Sign-On (SSO), or otherwise using the Platform, you ("User," "you") agree to these Terms. If you do not agree, you must not use the Platform.

Please also review our Privacy Policy, which forms part of these Terms and explains how we collect, use, and protect your personal data.

1. Eligibility and Account Registration

• The Platform is designed for organizational employees and adult learners aged eighteen (18) and above. By accessing the Platform, you confirm that you are authorized to do so by your organization.
• Authentication is provided exclusively through Microsoft/Office 365 Single Sign-On (SSO). You are responsible for safeguarding your Microsoft account credentials.
• Your organization is responsible for ensuring that only authorized employees access the Platform.
• The Platform is not intended for individuals under 18 years of age.

2. License and Acceptable Use

We grant you a limited, revocable, non-exclusive, and non-transferable license to use the Platform solely for cybersecurity awareness training. No ownership or intellectual property rights are transferred.

You must not:

• Copy, modify, reverse-engineer, or attempt to exploit the Platform.
• Resell, sublicense, or share access outside your organization.
• Bypass or interfere with security features.
• Use the Platform unlawfully, fraudulently, or in ways that may harm others.

Any scores, badges, or leaderboards on the Platform are for educational purposes only and have no monetary value.

3. Intellectual Property

All content, games, modules, software, graphics, and trademarks on the Platform are owned by Innvikta Cybersecurity Solutions or its licensors. You are not granted any rights in these materials except for the limited license above.

If you provide feedback or suggestions, we may use them to improve the Platform without obligation to compensate you.

4. Data Collection, Ownership, and Use

When you use the Platform, we collect and process information as described in our Privacy Policy, including identity and login data, training progress, technical data, and communications.

Ownership:

• Employees own their personal data.
• Organizations (employers) own training records and analytics relating to their employees.
• Employees must contact their employer to exercise rights regarding training data.

Purposes:

• Service Delivery: Authentication, progress tracking, certificates, and support.
• Marketing: By agreeing to these Terms and our Privacy Policy, you consent to receive cybersecurity insights, platform updates, promotions, and surveys via your business email. You may unsubscribe at any time.
• Research & Development: Aggregated or anonymized data may be analyzed to improve features and benchmark awareness trends. No personally identifiable data will ever be published or shared without explicit consent.

We comply with applicable data protection laws including GDPR (for EU/EEA users) and India's DPDP Act.

5. Security, Cookies, and Data Retention

• We apply industry-standard measures such as encryption, access controls, and monitoring to safeguard data.
• The Platform uses only session cookies to support secure login and core functionality.
• Data is retained as follows:
  • Training records: For the duration of the organization's subscription + 90 days.
  • Marketing data: Until the user unsubscribes or withdraws consent.
  • Security/legal logs: As required by law.

6. Microsoft/Office 365 Integration

Authentication is handled via Microsoft/Office 365 SSO. Microsoft acts as an independent controller of its own processing, under Microsoft's privacy policies.

Your organization is responsible for ensuring its Microsoft 365 configuration complies with applicable data protection laws.

7. Payment Terms

• Access to the Platform is subscription-based and provided only to organizations that have paid in full.
• Payment terms are:
  • Annual advance payment by the subscribing organization.
  • Access is granted for the paid subscription term only.
  • No refunds are provided once the subscription has commenced, except as required by law.
• Employees gain access solely through their organization's subscription; individual user payments are not accepted.

8. Service Availability

We strive to provide reliable access but may suspend or update the Platform for maintenance, security, or operational reasons. Where feasible, advance notice will be given.

9. Third-Party Services

The Platform may integrate or link with third-party services. Use of such services is governed by their own terms and privacy policies. We are not responsible for third-party practices.

10. Disclaimers

The Platform provides cybersecurity awareness training and simulations for educational purposes only. It is not a substitute for professional cybersecurity services or compliance audits.

The Platform is provided on an "as is" and "as available" basis. We do not guarantee uninterrupted access or error-free operation.

11. Limitation of Liability

To the fullest extent permitted by law:

• We are not liable for indirect, incidental, or consequential damages, including data loss or lost profits.
• Our total liability shall not exceed the greater of INR or the subscription fees paid by your organization in the preceding twelve (12) months.

12. Indemnification

Your organization agrees to indemnify and hold harmless Innvikta Cybersecurity Solutions against claims, damages, or expenses arising from unauthorized use, violations of these Terms, or unlawful conduct, except where caused by our intentional misconduct.

13. Suspension and Termination

We may suspend or terminate access if:

• You violate these Terms.
• Your access poses a security risk.
• Your organization fails to pay subscription fees.

Upon termination, your access is disabled and data handled in line with retention and deletion policies.

14. Compliance and User Rights

We process data in compliance with applicable laws.

• For registration and marketing data, users may exercise rights directly with us (see Privacy Policy).
• For training data, employees must contact their employer.
• We will cooperate with organizations to address employee data rights requests.

15. Governing Law and Dispute Resolution

These Terms are governed by the laws of India.

For international clients, disputes shall first be resolved through good-faith negotiation. If unresolved, disputes shall be referred to arbitration under the Rules of the International Chamber of Commerce (ICC), with the seat in Pune, Maharashtra, India, and proceedings in English.

Local consumer or data protection laws may provide additional mandatory rights which will apply where relevant.

16. Changes to Terms

We may update these Terms from time to time. Material changes will be communicated through the Platform or email. Continued use after changes take effect constitutes acceptance.

17. Contact Information

Innvikta Cybersecurity Solutions
D1 601, Satin Hills, Bavdhan, Pune – 411021, Maharashtra, India
Email (Privacy/Data Requests): privacy@innvikta.com
General Enquiries: +91 8788402025

← Back