Privacy Policy

Last Updated: 08/22/2025

TeamGuard AI Inc. d/b/a Adaptive Security ("Adaptive Security," "we", “us” or "our") provides a security platform that helps businesses prepare their workforce for cyber threats (the “Adaptive Platform”). This Privacy Policy describes how Adaptive Security processes personal information that we collect through our digital or online properties or services that link to this Privacy Policy (including as applicable, our www.adaptivesecurity.com website and social media pages) as well as our marketing activities, live events and other activities described in this Privacy Policy (collectively, the “Service”). Adaptive Security may provide additional or supplemental privacy policies to individuals for specific products or services that we offer at the time we collect personal information.

This Privacy Policy does not apply to information that we process on behalf of our business customers (such as businesses and other organizations, collectively “Employers”) while providing the Adaptive Platform to them. If you are a user of the Adaptive Platform as a result of a contract we have with your Employer (e.g., you signed up for the Adaptive Platform at the invitation of your Employer), then our collection and processing of your personal information may be governed by our agreements with such Employer, or by such Employer’s own privacy policy. If you have concerns regarding your personal information that we process on behalf of an Employer, please direct your concerns to that Employer.

European Users: Please see the ‘Notice to European Users’ section below for additional information for individuals located in the European Economic Area or United Kingdom (which we refer to as “Europe,” and “European” should be understood accordingly).

‍

Personal information we collect

Information you provide to us. Personal information you may provide to us through the Service or otherwise includes:

Contact data, such as your first and last name, email, and phone number.
Demographic data, such as your city, state, country of residence, postal code, and age.
Communications data based on our exchanges with you, including when you contact us through the Service, social media, or otherwise.
Account data, such as the username and password that you may set to establish an account on the Adaptive Platform through your Employer, the name of your Employer, your work role, and any other information that you add to your Adaptive Platform account.
Marketing data, such as your preferences for receiving our marketing communications and details about your engagement with them.
Other data not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.

Third-party sources. We may combine personal information we receive from you with personal information falling within one of the categories identified above that we obtain from other sources, such as:

Public sources, such as breach databases, public records, social media platforms, and other publicly available sources.
Data providers, such as information services and data licensors.
Customers, including your Employer, who may submit information about you in connection with their use of the Adaptive Platform.
Service providers that provide services on our behalf or help us operate the Service or our business.
Business transaction partners. We may receive personal information in connection with an actual or prospective business transaction. For example, we may receive your personal information from an entity we acquire or are acquired by, a successor, or assignee or any party involved in a business transaction such as a merger, acquisition, sale of assets, or similar transaction, and/or in the context of an insolvency, bankruptcy, or receivership.

Automatic data collection. We, our service providers, and our business partners may automatically log information about you, your computer or mobile device, and your interaction over time with the Service, our communications and other online services, such as:

Device data, such as your computer or mobile device’s operating system type and version, manufacturer and model, browser type, screen resolution, RAM and disk size, CPU usage, device type (e.g., phone, tablet), IP address, unique identifiers (including identifiers used for advertising purposes), language settings, mobile device carrier, radio/network information (e.g., Wi-Fi, LTE, 3G), and general location information such as city, state or geographic area.
Online activity data, such as pages or screens you viewed, how long you spent on a page or screen, the website you visited before browsing to the Service, navigation paths between pages or screens, information about your activity on a page or screen, access times and duration of access, and whether you have opened our emails or clicked links within them.
Communication interaction data such as your interactions with our email, text or other communications (e.g., whether you open emails) – we may do this through use of pixel tags (which are also known as clear GIFs), which may be embedded invisibly in our emails.

For more information concerning our automatic collection of data, please see the Tracking technologies section below.

‍

Tracking & Other Technologies

Cookies and other technologies. Some of our automatic collection is facilitated by cookies and similar technologies. For more information, see our Cookie Policy. We will also store a record of your preferences in respect of the use of these technologies in connection with the Service.

Session-replay technologies, such as those provided by PostHog that employ software code to record users’ interactions with the Services in a manner that allows us to watch video replays of those user sessions. The replays include users’ clicks, mobile app touches, mouse movements, scrolls and keystrokes/key touches during those sessions. These replays help us diagnose usability problems and identify areas for improvement. You can learn more about PostHog’s privacy practices at https://posthog.com/privacy.

‍

How we use your personal information

We may use your personal information for the following purposes or as otherwise described at the time of collection:

Service delivery and operations. We may use your personal information to:

provide the Service and operate our business;
enable security features of the Service;
communicate with you about the Service, including by sending Service-related announcements, updates, security alerts, and support and administrative messages;
communicate with you about events or contests in which you participate; and
provide support for the Service, and respond to your requests, questions and feedback.

Service personalization, which may include using your personal information to:

understand your needs and interests;
personalize your experience with the Service and our Service-related communications; and
remember your selections and preferences as you navigate webpages.

Service improvement and analytics. We may use your personal information to analyze your usage of the Service, improve the Service, improve the rest of our business, help us understand user activity on the Service, including which pages are most and least visited and how visitors move around the Service, as well as user interactions with our emails, and to develop new products and services. For example, we use Google Analytics for this purpose. You can learn more about Google Analytics and how to prevent the use of Google Analytics relating to your use of our sites here: https://tools.google.com/dlpage/gaoptout?hl=en.

Marketing and advertising. We, our service providers and our third-party advertising partners may collect and use your personal information for marketing and advertising purposes:

Direct marketing. We may send you direct marketing communications and may personalize these messages based on your needs and interests. You may opt-out of our marketing communications as described in the Opt-out of marketing section below.
Interest-based advertising. We, our service providers, and third-party advertising partners may use cookies and other technologies to collect information about your interaction (including the data described in the automatic data collection section above) with the Service, our communications and other online services over time, and use that information to serve online ads that we or they think will interest you. This is called interest-based advertising. We may also share information about our users with these companies to facilitate interest-based advertising to those or similar users on other online platforms. ‍

Events, promotions and contests. We may use your personal information to:

administer promotions and contests
communicate with you about promotions or contests in which you participate
contact or market to you after collecting your personal information at an event‍

Compliance and protection. We may use your personal information to:

comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas, investigations or requests from government authorities;
protect our, your or others’ rights, privacy, safety or property (including by making and defending legal claims);
audit our internal processes for compliance with legal and contractual requirements or our internal policies;
enforce the terms and conditions that govern the Service; and
prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft. ‍

Data sharing in the context of corporate events, we may share certain personal information in the context of actual or prospective corporate events – for more information, see How we share your personal information, below.‍

To create aggregated, de-identified and/or anonymized data. We may create aggregated, de-identified and/or anonymized data from your personal information and other individuals whose personal information we collect. We make personal information into de-identified and/or anonymized data by removing information that makes the data identifiable to you. We may use this aggregated, de-identified and/or anonymized data and share it with third parties for our lawful business purposes, including to analyze and improve the Service and promote our business.

Further uses, in some cases, we may use your personal information for further uses, in which case we will ask for your consent to use of your personal information for those further purposes if they are not compatible with the initial purpose for which information was collected.

How we disclose your personal information

We may disclose your personal information with the following parties (or as otherwise described in this Privacy Policy, in other applicable notices, or at the time of collection).

Service providers. Third parties that provide services on our behalf or help us operate the Service or our business (such as hosting, information technology, customer support, email delivery, marketing, consumer research, features powered by generative AI, and website analytics).

Advertising partners. Third-party advertising companies for the interest-based advertising purposes described above.

Partners. Third parties with whom we partner, including parties with whom we co-sponsor events or promotions, with whom we jointly offer products or services, or whose products or services may be of interest to you.

Professional advisors. Professional advisors, such as lawyers, auditors, bankers and insurers, where necessary in the course of the professional services that they render to us.

Third parties designated by you. We may share your personal information with third parties, such as your Employer, where you have instructed us or provided your consent to do so.

Authorities and others. Law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the Compliance and protection purposes described above.

Business transferees. We may disclose personal information in the context of actual or prospective business transactions (e.g., investments in or financings of Adaptive Security, public stock offerings, or the sale, transfer or merger of all or part of our business, assets or shares). For example, we may need to share certain personal information with prospective counterparties and their advisers. We may also disclose your personal information to an acquirer, successor, or assignee of Adaptive Security as part of any merger, acquisition, sale of assets, or similar transaction, and/or in the event of an insolvency, bankruptcy, or receivership in which personal information is transferred to one or more third parties as one of our business assets.‍

Your choices

Opt-out of communications. You may opt-out of marketing-related emails from Adaptive Security by following the opt-out or unsubscribe instructions at the bottom of the email, or by contacting us.

Cookies and other technologies. For more information about cookies and similar technologies employed by the Service and how to manage your preferences, see our Cookie Policy.‍

Do Not Track. Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.‍

Declining to provide information. We need to collect personal information to provide certain services. If you do not provide the information we identify as required or mandatory, we may not be able to provide those services, including registering for an account on the Adaptive Platform.

California residents. Under California’s Shine the Light law (California Civil Code Section 1798.83), California residents may ask companies with whom they have formed a business relationship primarily for personal, family or household purposes to provide the names of third parties to which they have disclosed certain personal information (as defined under the Shine the Light law) during the preceding calendar year for their own direct marketing purposes, and the categories of personal information disclosed. You may send us requests for this information to privacy@adaptivesecurity.com. In your request, you must include the statement “Shine the Light Request," and provide your first and last name and mailing address and certify that you are a California resident. We reserve the right to require additional information to confirm your identity and California residency. Please note that we will not accept requests via telephone, mail, or facsimile, and we are not responsible for notices that are not labeled or sent properly, or that do not have complete information.

‍Other sites and services‍

The Service may contain links to websites, mobile applications, and other online services operated by third parties. In addition, our content may be integrated into web pages or other online services that are not associated with us. These links and integrations are not an endorsement of, or representation that we are affiliated with, any third party. We do not control websites, mobile applications or online services operated by third parties, and we are not responsible for their actions. We encourage you to read the privacy policies of the other websites, mobile applications and online services you use.‍

Security ‍

We employ technical, organizational and physical safeguards designed to protect the personal information we collect. However, security risk is inherent in all internet and information technologies and we cannot guarantee the security of your personal information. ‍

International data transfers‍

We are headquartered in the United States and may use service providers that operate in other countries. Your personal information may be transferred to the United States or other locations where privacy laws may not be as protective as those in your state, province, or country.‍

Users in Europe should also read the information provided about transfers of personal information to recipients outside Europe contained in the ‘Notice to European Users’ below. ‍

Children ‍

The Service is not intended for use by anyone under 18 years of age. If you are a parent or guardian of a child from whom you believe we have collected personal information in a manner prohibited by law, please contact us. If we learn that we have collected personal information through the Service from a child without the consent of the child’s parent or guardian as required by law, we will comply with applicable legal requirements to delete the information.‍

Changes to this Privacy Policy ‍

We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on the Service or other appropriate means. Any modifications to this Privacy Policy will be effective upon our posting the modified version (or as otherwise indicated at the time of posting). In all cases, your use of the Service after the effective date of any modified Privacy Policy indicates your acknowledging that the modified Privacy Policy applies to your interactions with the Service and our business.‍

How to contact us

Email: privacy@adaptivesecurity.com

‍Notice to European users

General

Where this Notice to European users applies. The information provided in this ‘Notice to European users’ section applies only to individuals located in the European Economic Area (EEA) or United Kingdom (UK) (i.e., “Europe” as defined at the top of this Privacy Policy).

Personal information. References to “personal information” in this Privacy Policy should be understood to include a reference to “personal data” as defined in the “GDPR” (i.e., the General Data Protection Regulation 2016/679 (“EU GDPR”)) and the EU GDPR as it forms part of the laws of the United Kingdom (“UK GDPR”) Under the GDPR, “personal data” means information about individuals from which they are either directly identified or can be identified. The personal information that we collect from and about you is described in greater detail in the section “Personal Information we collect” that is set out above.

Controller. Adaptive Security is the “controller” in respect of the processing of your personal information covered by this Privacy Policy for purposes of the GDPR. See the ‘How to contact us’ section above for our contact details.

Our GDPR Representatives. We have appointed the following representatives in Europe as required by the GDPR – you can contact them directly should you wish:

Our Representative in the EU. Our EU representative appointed under the EU GDPR is Adam Brogden. You can contact them:

By email to: contact@gdprlocal.com.
By postal mail to: INSTANT EU GDPR REPRESENTATIVE LIMITED Office 2 12A Lower Main Street, Lucan Co. Dublin K78 X5P8 Ireland

Our Representative in the UK. Our UK representative appointed under the UK GDPR is Adam Brogden. You can contact them:

By email to: contact@gdprlocal.com.
By postal mail to: GDPRLocal Ltd. 1st Floor Front Suite 27-29 North Street, Brighton England BN1 1EB

Our legal bases for processing

In respect of each of the purposes for which we use your personal information, the GDPR requires us to ensure that we have a “legal basis” for that use.

Our legal bases for processing your personal information described in this Privacy Policy are listed below.

Where we need to process your personal information in order to deliver the Service to you, or where you have asked us to take specific action which requires us to process your personal information (“Contractual Necessity”).
Where it is necessary for our legitimate interests and your interests and fundamental rights do not override those interests (“Legitimate Interests”). More detail about the specific legitimate interests pursued in respect of each Purpose we use your personal information for is set out in the table below.
Where we need to comply with a legal or regulatory obligation (“Compliance with Law”).
Where we have your specific consent to carry out the processing for the Purpose in question (“Consent”).

We have set out below, in a table format, the legal bases we rely on in respect of the relevant Purposes for which we use your personal information – for more information on these Purposes and the data types involved, see the ‘How we use your personal information’ section above and the description of associated data sharing relevant to such purposes set out in the ‘How we share your personal information’ section also above.

Purpose	Categories of personal information involved	Legal basis
Service delivery and operations	Demographic data Communications data Account data Data from Third Party Sources Device data	Contractual Necessity Legitimate Interests. We have a legitimate interest in ensuring the ongoing security and proper operation of our Service (including responding to any contact via “contact us”), our business and associated IT systems.
Service personalization	Demographic data Account data Data from Third Party Sources Device data	Legitimate Interests. We have a legitimate interest in providing you with a good service via the Service, which is personalized to you and that remembers your selections and preferences. Consent, in respect of any optional processing relevant to personalization (including processing directly associated with any optional cookies used for this purpose).
Service improvement and analytics	Contact data Demographic data Account data Data from Third Party Sources Device data Online activity data Communication interaction data	Legitimate Interests. We have a legitimate interest in providing you with a good service and analysing how you use it so that we can improve it over time, as well as developing and growing our business. Consent, in respect of any optional cookies used for this purpose.
Direct marketing	Contact data Demographic data Account data Marketing data Data from Third Party Sources	Legitimate Interests. We have a legitimate interest in promoting our operations and goals as an organization and sending marketing communications for that purpose. Consent, in circumstances or in jurisdictions where consent is required under applicable data protection laws to the sending of any given marketing communications.
Interest-based advertising	Device data Online activity data Data from Third Party Sources	Consent
Events, promotions and contests	Contact data Demographic data Account data Data from Third Party Sources	Contractual Necessity, to administer events in accordance with the terms or rules thereof (including communicating with you as and where necessary). In respect of promoting these events: Legitimate Interests - we have a legitimate interest in promoting these events, including associated publicizing of our business and operations. Consent - in circumstances or in jurisdictions where consent is required under applicable data protection laws to the sending of any given promotional communications.
Compliance and protection	Any and all data types relevant in the circumstances	Compliance with Law. Legitimate Interests. Where Compliance with Law is not applicable, we have a legitimate interest in participating in, supporting, and following legal process and requests, including through co-operation with authorities. We may also have a legitimate interest in ensuring the protection, maintenance, and enforcement of our rights, property, and/or safety.
Data sharing in the context of corporate events	Any and all data types relevant in the circumstances	Legitimate Interests. We have a legitimate interest in providing information to relevant third parties who are involved in an actual or prospective corporate event (including to enable them to investigate – and, where relevant, to continue to operate – all or relevant part(s) of our operations).
To create aggregated, de-identified and/or anonymized data	Any and all data types relevant in the circumstances	Legitimate Interests. We have legitimate interest in taking steps to preserve the privacy of our users.
Further uses	Any and all data types relevant in the circumstances	The original legal basis relied upon, if the relevant further use is compatible with the initial purpose for which the personal information was collected. Consent, if the relevant further use is not compatible with the initial purpose for which the personal information was collected.

‍

Retention

We retain personal information for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements, to establish or defend legal claims, or otherwise for the ‘Compliance and protection’ purposes outlined above.

To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.

When we no longer require the personal information that we have collected about you, we will either delete or anonymize it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible. If we anonymize your personal information (so that it can no longer be associated with you), we may use this information indefinitely without further notice to you.

Other information

No obligation to provide personal information. You do not have to provide personal information to us. However, where we need to process your personal information either to comply with applicable law or to deliver our Service to you, and you fail to provide that personal information when requested, we may not be able to provide some or all of our Service to you. We will notify you if this is the case at the time.

No sensitive information. We ask that you not provide us with any sensitive personal information (e.g., information related to racial or ethnic origin, political opinions, religion or other beliefs, health, criminal background or trade union membership, or biometric or genetics characteristic other than as requested by us as part of the Service) on or through the Service, or otherwise to us. If you provide us with any such sensitive personal information to us when you use the Service, you must consent to our processing and use of such sensitive personal information in accordance with this Privacy Policy. If you do not consent to our processing and use of such sensitive personal information, you must not submit such sensitive personal information through our Service.

No automated decision-making and profiling. As part of the Service, we do not engage in automated decision-making and/or profiling, which produces legal or similarly significant effects.

Your additional rights

General. European data protection laws may give you certain rights regarding your personal information in certain circumstances. If you are located in Europe, you may ask us to take the following actions in relation to your personal information that we hold:

Access. Provide you with information about our processing of your personal information and give you access to your personal information.

Correct. Update or correct inaccuracies in your personal information.
Delete. Delete your personal information where there is no good reason for us continuing to process it - you also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
Transfer. Transfer to you or a third party of your choice a machine-readable copy of your personal information which you have provided to us.
Restrict. Restrict the processing of your personal information, for example if you want us to establish its accuracy or the reason for processing it.
Object. Object to our processing of your personal information where we are relying on Legitimate Interests – you also have the right to object where we are processing your personal information for direct marketing purposes.
Withdraw Consent. When we use your personal information based on your consent, you have the right to withdraw that consent at any time.

Exercising These Rights. You may submit these requests by contacting us. We may request specific information from you to help us confirm your identity and process your request. Whether or not we are required to fulfill any request you make will depend on a number of factors (e.g., why and how we are processing your personal information), if we reject any request you may make (whether in whole or in part) we will let you know our grounds for doing so at the time, subject to any legal restrictions. Typically, you will not have to pay a fee to exercise your rights; however, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. We try to respond to all legitimate requests within a month of receipt. It may take us longer than a month if your request is particularly complex or if you have made a number of requests; in this case, we will notify you and keep you updated.

Your Right to Lodge a Complaint with your Supervisory Authority. Although we urge you to contact us first to find a solution for any concern you may have, in addition to your rights outlined above, if you are not satisfied with our response to a request you make, or how we process your personal information, you can make a complaint to the data protection regulator in your habitual place of residence.

For users in the European Economic Area – the contact information for the data protection regulator in your place of residence can be found here: https://edpb.europa.eu/about-edpb/board/members_en
For users in the UK – the contact information for the UK data protection regulator can be found here: https://ico.org.uk/make-a-complaint/

Data Processing outside Europe

We are a U.S.-based company and many of our service providers, advisers, partners or other recipients of data are also based in the U.S. This means that, if you use the Service, your personal information will necessarily be accessed and processed in the U.S. It may also be provided to recipients in other countries outside Europe.

Where we share your personal information with third parties who are based outside Europe, we try to ensure a similar degree of protection is afforded to it by making sure one of the following mechanisms is implemented:

Transfers to territories with an adequacy decision. We may transfer your personal information to countries or territories whose laws have been deemed to provide an adequate level of protection for personal information by the European Commission or UK Government (as and where applicable) (from time to time) or under specific adequacy frameworks approved by the European Commission or UK Government (as and where applicable) (from time to time), such as the EU-U.S. Data Privacy Framework or the UK Extension thereto.

Transfers to territories without an adequacy decision.
- We may transfer your personal information to countries or territories whose laws have not been deemed to provide such an adequate level of protection (e.g., the U.S.).
- However, in these cases:
  - we may use specific appropriate safeguards, which are designed to give personal information effectively the same protection it has in Europe – for example, standard-form contracts approved by relevant authorities for this purpose; or
  - in limited circumstances, we may rely on an exception, or ‘derogation’, which permits us to transfer your personal information to such country despite the absence of an ‘adequacy decision’ or ‘appropriate safeguards’ – for example, reliance on your explicit consent to that transfer.

You may contact us if you want further information on the specific mechanism used by us when transferring your personal information out of Europe.

Contents

Cookie Policy

Last Updated: 08/27/2025

What does this Cookie Policy cover?

This Cookie Policy explains how TeamGuard AI Inc. d/b/a Adaptive Security (“Adaptive”, “we”, “us” or “our”) uses cookies and other similar technologies on our websites that link to this Cookie Policy (the “Site”), as well as in our emails. It also outlines your choices around managing these cookies and similar technologies.

Please refer to our Privacy Policy for more information on our privacy practices.

Managing your preferences.

Before we dive into the details – note that you can accept or reject our use of cookies and similar technologies through the cookie banner on our Site.

If you do not accept our cookies, you may experience some inconvenience in your use of our Site. For example, we may not be able to recognise your device and you may need to log in every time you visit our Site.

If you want to find out more about cookies and similar technologies on our Site and emails, please keep reading.

What types of technologies does Adaptive use?

We may use any or all of the following “technologies” on our Site and in our emails:

Cookies: a cookie is a very small text file that may be placed on your browser or in the storage on your device. There are two types: “session cookies” and “persistent cookies”:

Session cookies are cookies that disappear from your device or browser when you close your browser.
Persistent cookies stay on your device even after you close your browser.

Please note that both Adaptive and third-party service providers may set cookies on via our Site – these ‘third party cookies’ are set by domains other than those we control and may recognise your device across different websites.

Pixel tags:

A pixel tag is a single pixel, transparent GIF image with a unique identifier that can recognise certain types of data on your device (similar to how cookies do). They are used to operate and improve the Site and our email practices, including to help deliver cookies, count visits and understand usage and email campaign effectiveness.
For example, we may put pixel tags on emails to understand how you interact with that email – such as whether you opened the email, whether you clicked on a link in the email that directed you to our Site etc – these pixels may collect the time, location and operating system of the device you use to read the email.

Other similar technologies:

We may also use other tracking technologies, such as mobile advertising IDs and tags, HTML5 local storage / local shared objects (which store relevant data locally on your device), for similar purposes as described in this Cookie Policy.

So, when we refer to cookies and “similar technologies” in this Cookie Policy, such reference includes reference to the pixel tags discussed above, HTML5 local storage / local shared objects and other equivalent tracking technologies.

Session-replay technologies:

These technologies employ software code to record users’ interactions with the Site in a manner that allows us to watch DVR-like replays of those user sessions. The replays include users’ clicks, mobile app touches, mouse movements, scrolls and keystrokes/key touches during those sessions. For example, we use Posthog for this purpose - you can learn more about Posthog’s privacy practices at https://posthog.com/privacy.

Why do we use cookies and similar technologies?

The purposes for which we use technologies may fall into one of the following categories:

Strictly necessary technologies: these technologies are essential in order to enable our Site to provide the function you have requested, such as by helping to ensure that the content of a page loads quickly and effectively.
Functionality technologies: these technologies allow us to provide enhanced personalisation and functionality, such as tailoring content to you, remembering your choices and preferences on the Site (e.g. language, text size, etc.) or remembering search parameters.
Analytics technologies: these technologies collect information on how users interact with our Site and enable us to improve how it operates and our business more widely. In particular, for more details about how Google uses data in the context of Google Analytics, please see here: www.google.com/policies/privacy/partners/.
Advertising technologies: these technologies are deployed on the Site and collect information about your browsing habits in order to provide advertising which is more relevant to you and your interests – for example, they remember the websites you have visited and share that information with other parties such as advertising technology service providers.

‍

A full list of the technologies we use can be found in the section titled: Details of Cookies and Similar Technologies.

How can you manage your consent?

You can control or limit how cookies and similar technologies are used by taking the following steps:

Accepting or rejecting our use of cookies and similar technologies through the cookie consent banner on our Site.
Pixel tags in emails can typically be blocked by default by configuring your preferences in your email client to block external images or setting it to show “plain text only” emails.

For more information about cookies, including about the cookies have been set on your device and how to manage and delete them, visit www.allaboutcookies.org. Also, to learn more about targeting and advertising cookies and your choices more widely, you can go to the Network Advertising Initiative, the Digital Advertising Alliance’s Consumer Choice, or if you are in Europe, Your Online Choices.

Finally, if you do not accept certain non-essential cookies and similar technologies, you may experience some inconvenience in your use of our Site. For example, we may not be able to recognise your device and you may need to log in every time you visit our Site.

Changes to this Cookie Policy.

Information about the cookies and similar technologies we use may be updated from time to time, so please check this Cookie Policy on a regular basis for any changes.

Questions.

If you have any questions about this Cookie Policy, please contact us by email at privacy@adaptivesecurity.com.

‍

Contents

Terms of Service

Last Updated: 07/08/2024

Introduction

Welcome to Adaptive Security! These Terms of Service ("Terms") govern your use of our services, website, and applications (collectively, the "Services"). By accessing or using our Services, you agree to be bound by these Terms. If you do not agree to these Terms, please do not use our Services.

‍1. Definitions

"Adaptive Security," "we," "our," or "us" refers to Adaptive Security, Inc., the provider of the Services. "You" or "User" refers to the individual or entity accessing or using our Services. "Services" refers to the services provided by Adaptive Security, including our website, applications, and any related products and services.

‍2. Eligibility

You must be at least 18 years old to use our Services. By using our Services, you represent and warrant that you have the right, authority, and capacity to enter into these Terms and to abide by all of the terms and conditions set forth herein.

‍3. Account Registration

‍To access certain features of our Services, you may be required to create an account. You agree to provide accurate, current, and complete information during the registration process and to update such information to keep it accurate, current, and complete. You are responsible for safeguarding your password and for any activities or actions under your account.

‍4. Use of Services

You agree to use our Services only for lawful purposes and in accordance with these Terms. You agree not to: Use our Services in any manner that could disable, overburden, damage, or impair the Services or interfere with any other party's use of the Services. Use any robot, spider, or other automatic device, process, or means to access the Services for any purpose, including monitoring or copying any of the material on our Services. Introduce any viruses, Trojan horses, worms, logic bombs, or other material that is malicious or technologically harmful.

‍5. Intellectual Property Rights

‍The Services and their entire contents, features, and functionality (including but not limited to all information, software, text, displays, images, video, and audio, and the design, selection, and arrangement thereof) are owned by Adaptive Security, its licensors, or other providers of such material and are protected by United States and international copyright, trademark, patent, trade secret, and other intellectual property or proprietary rights laws.

‍6. Privacy

‍Your use of our Services is also governed by our Privacy Policy, which is incorporated by reference into these Terms. Please review our Privacy Policy to understand our practices.

‍7. Termination

‍We may terminate or suspend your account and bar access to the Services immediately, without prior notice or liability, under our sole discretion, for any reason whatsoever, including without limitation if you breach the Terms. Upon termination, your right to use the Services will immediately cease.

‍8. Disclaimer of Warranties

‍The Services are provided "as is" and "as available" without any warranties of any kind, either express or implied, including but not limited to the implied warranties of merchantability, fitness for a particular purpose, or non-infringement. Your use of the Services is at your sole risk.

‍9. Limitation of Liability

‍To the fullest extent permitted by applicable law, in no event shall Adaptive Security, its affiliates, directors, employees, or agents be liable for any indirect, incidental, special, consequential, or punitive damages, including without limitation, loss of profits, data, use, goodwill, or other intangible losses, resulting from (i) your access to or use of or inability to access or use the Services; (ii) any conduct or content of any third party on the Services; (iii) any content obtained from the Services; and (iv) unauthorized access, use, or alteration of your transmissions or content.

‍10. Governing Law and Jurisdiction

‍These Terms shall be governed and construed in accordance with the laws of the State of California and the State of New York, without regard to their conflict of law provisions. Any dispute arising from these Terms or the use of the Services shall be resolved in the courts located in California or New York, and you consent to the exclusive jurisdiction of such courts.

‍11. Changes to Terms

‍We reserve the right, at our sole discretion, to modify or replace these Terms at any time. If a revision is material, we will provide at least 30 days' notice prior to any new terms taking effect. What constitutes a material change will be determined at our sole discretion.

‍

12. SMS and Voice Communications

By opting into Adaptive phishing simulations, you consent to receive SMS and/or voice communications from Adaptive Security. Message and data rates may apply depending on your mobile carrier. Message frequency may vary.You may opt out of SMS communications at any time by replying “STOP” to any message you receive. For assistance, you can reply “HELP” or contact our support team at support@adaptivesecurity.com.Your consent to receive SMS or voice messages is not a condition of any purchase.

13. Contact Us

If you have questions about this terms of service, email us at tos@adaptivesecurity.com

Or reach us at

9800 Wilshire Boulevard
Beverly Hills, CA 90212

Contents

Employee Terms of Service

Last Updated: 08/21/2025

Introduction

‍1. Definitions

“Adaptive Security,” “we,” “our,” or “us” refers to TeamGuard AI Inc. d/b/a Adaptive Security, the provider of the Services. "Services" refers to the security training courses, phishing simulations, and related analyses provided by Adaptive Security. "User" or "you" refers to the user or person completing the security trainings or interacting with the phishing simulations.

‍2. Eligibility

You must be at least 18 years old to use the Services. By using the Services, you confirm that you meet this requirement and are authorized by your employer to do so.

3. Use of Services

You agree to use the Services responsibly and in accordance with the instructions provided by your employer and Adaptive Security. You agree not to:

Interfere with or disrupt the delivery of training or phishing simulations
Attempt to reverse-engineer, bypass, or disable technical measures in the Services
Introduce malicious code or otherwise compromise the integrity of the training environment

4. Termination

We or your employer may restrict or terminate your access to the services at any time if you violate these Terms or for other administrative or security-related reasons.

5. Disclaimer of Warranties

The Services are provided "as is" and "as available." We make no guarantees about their effectiveness or your results. You participate at your own discretion and risk.

6. Limitation of Liability

To the fullest extent permitted by law, Adaptive Security is not liable for any indirect or consequential damages resulting from your use of the Services, including but not limited to issues with simulation content, training delivery, or data loss.

7. Use of Public and Employer-Provided Information

You agree that to deliver a personalized, effective, and risk-aware experience, Adaptive Security on behalf of your employer may collect and process both publicly available information about you and data about you provided by your employer.

This may include:

Publicly Available Information: Information from lawful public sources such as breach databases, social media, online directories, and other websites. This information is used to personalize your training, simulate real-world threats, assess your individual risk, and help your employer identify and remove personal information that may pose a security risk.
Employer-Provided Systems: Information from internal systems integrated by your employer, including but not limited to human resources information systems (HRIS), identity providers (such as Active Directory or Okta), communication tools, and directory services. This data helps tailor training content, determine job-specific risk exposure, and generate simulations that reflect real-world conditions for your role or department.

The collection and processing of this information on behalf of your employer may be governed by our agreements with your employer or by your employer’s own privacy policy. If you have questions, please contact your employer.

8. SMS and Voice Communications

By participating in the security trainings or phishing simulations, you may receive SMS messages, phone calls, emails, or other electronic communications on behalf of your employer from Adaptive Security and its third-party service providers. These communications may involve the use of artificial intelligence technology, automated systems for the selection and dialing of telephone numbers, and pre-recorded or artificial voices. These communications are intended to strengthen your awareness of security risks and help you respond appropriately.

You expressly consent to receive the communications described above from Adaptive Security and its third-party service providers on behalf of your employer at any telephone number or contact address you provide to us or that your employer provides to us in connection with your use of the Services. You further agree that any communications with Adaptive Security, whether initiated by you or Adaptive Security, may be monitored, recorded, and used by Adaptive Security and its third-party service providers to provide the Services for your employer. You consent to this recording, monitoring, data collection and usage.

‍
SMS message and data rates may apply depending on your mobile carrier. Message and call frequency may vary. You may opt out of SMS communications at any time by replying “STOP” to any SMS message you receive in connection with your use of the Services. You may revoke your consent to calls being recorded by contacting our support team at security@adaptivesecurity.com. For assistance, you can reply “HELP” to our SMS messages or contact our support team at support@adaptivesecurity.com.

9. Changes to Terms

We may revise these Terms occasionally. If changes are made, we will notify your employer or update the effective date on our site. Continued participation after changes means you accept the new Terms.

10. Contact Us

If you have questions about these Terms, please contact us at support@adaptivesecurity.com.

Address:
TeamGuard AI Inc. (Attn: Adaptive Security)
902 Broadway Floor 8
New York, NY 10010

‍

Contents

Messaging Privacy Policy

Last Updated: 11/01/2024

This Messaging Program Privacy Policy explains how TeamGuard AI Inc. d/b/a Adaptive Security collects and uses information about you in relation to its text message program (the “Messaging Service”). For the purposes of the Messaging Service, Adaptive acts as the service provider and data processor of your information.

Collection of Information

We collect various information on our behalf from and about you, including information you directly provide when you use the Messaging Service. For example, we collect the phone number and email address you provided when signing up for the Messaging Service. When you send messages via the Messaging Service, we will also collect your messaging history and any information included in those messages.

We may also collect information about you using cookies or similar technologies. Cookies are pieces of information that are stored by your browser on the hard drive or memory of your device. Cookies enable personalization of your experience on the Messaging Service (e.g., sending you personalized text messages). We will also collect your contact information if you contact us with questions about the Messaging Service or for customer service.

We use your information to deliver, analyze, maintain and support the Messaging Service. We may also use your information to enhance the Messaging Service features and customize and personalize your experiences on the Messaging Service.

Use of Information

Sharing of Information

We may share, transfer, or disclose your information, if you consent to us doing so, as well as in the following circumstances:

Service Providers. We may share your information with third parties to help us provide the Messaging Service to you.

Legal Requirement and Protection of Adaptive Security and Others. We may disclose your information as we believe such disclosure is necessary or appropriate to: (i) comply with applicable law and legal processes; (ii) respond to requests from public and government authorities, including public and government authorities outside your country of residence; (iii) enforce a contract with us; (iv) protect our rights, privacy, safety, or property, and/or that of our affiliates, you or others; and (v) allow us to pursue available remedies or limit the damages that we may sustain.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service is permitted.

‍

Protection of Information

We take a variety of physical, technical, administrative, and organizational security measures based on the sensitivity of the information we collect to protect your information against accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure or access. Unfortunately, no online activity can be guaranteed to be 100% secure. While we strive to protect your information against unauthorized use or disclosure, we cannot ensure or warrant the security of any information you provide. We do not accept liability for unintentional disclosure.

Retention of Information

We retain your information for as long as you participate in the Messaging Service or as needed to comply with applicable legal obligations. We will also retain and use your information as necessary to resolve disputes, protect us and our customers, and enforce our agreements.

Choices and Controls

Consent to receive automated marketing text messages is not a condition of any purchase. You can opt-out of receiving further commercial text messages via the Messaging Service by responding to any of our text messages with any of the following replies: STOP, END, CANCEL, UNSUBSCRIBE, or QUIT.