Callstrike

Terms of service

Last Updated: July 24th, 2026

These Terms of Service (the “Terms”) govern access to and use of the website www.callstrike.ai (the “Website”) and the Callstrike platform (the “Platform”), operated by CALLSTRIKE LTD (“Callstrike”, “we”, or “our”).

The Platform helps organizations train employees and increase awareness of voice-based and message-based social engineering threats, including vishing, phishing and deepfake impersonation, by running simulated attacks against that organization’s own personnel (the “Security Training Services”).

Please read these Terms carefully. By accessing the Website, creating an account, or using the Platform, you agree to be bound by them. If you are agreeing on behalf of an organization, you confirm you have authority to bind that organization, and “you” and “Customer” refer to that organization.

If you do not agree to these Terms, do not use the Website or the Platform. Our Privacy Policy forms part of these Terms. Questions can be sent to support@callstrike.ai.

1. Definitions

  • “Authorized User” means an individual the Customer permits to access the Platform, such as an administrator or analyst.
  • “Target” means an individual who receives a Simulation, typically an employee or contractor of the Customer.
  • “Simulation” means a simulated social engineering exercise delivered through the Platform, including simulated voice calls, messages and synthetic voice or video impersonation.
  • “Customer Data” means data the Customer or its Authorized Users submit to the Platform, including Target contact details, campaign configuration and results.
  • “Subscription” means the plan, term and entitlements agreed between Callstrike and the Customer.

2. Accounts and Authorized Users

To use the Platform the Customer must create a workspace and register Authorized Users. The Customer is responsible for the accuracy of registration information and for keeping credentials secure.

The Customer is responsible for all activity carried out under its workspace, including activity by its Authorized Users, and must notify us promptly at support@callstrike.ai of any suspected unauthorized access.

Access is granted to the Customer for its internal business purposes only. Authorized Users must not share individual credentials, and access must not be resold or made available to any third party except as expressly agreed in writing.

3. Authorization to run Simulations

This section is fundamental to the service. The Platform generates realistic simulated attacks, including synthetic voice and video impersonation. It is provided strictly as a security awareness tool for organizations testing their own people.

The Customer is solely responsible for ensuring it is authorized to run every Simulation it configures. By launching a Simulation, the Customer represents and warrants that:

  • each Target is an employee, contractor or other individual within the Customer’s own organization, or an individual who has otherwise given valid authorization for the Simulation;
  • the Customer has obtained all internal approvals and any consents, notifications or works council or employee representative authorizations required by applicable law;
  • the Customer has a lawful basis for the processing involved, including any processing of biometric or voice data used to create a synthetic voice;
  • where a Simulation impersonates a named individual, the Customer has that individual’s authorization to use their likeness or voice;
  • the Simulation complies with all applicable laws in every jurisdiction where a Target is located, including telecommunications, recording, impersonation and data protection laws.

Callstrike does not verify authorization on the Customer’s behalf and acts on the Customer’s instructions. Running Simulations against individuals outside the Customer’s organization, or without authorization, is a material breach of these Terms.

4. Acceptable use

The Customer must not, and must not permit anyone to:

  • use the Platform to conduct an actual attack, to commit fraud, or to obtain money, credentials or data for any purpose other than a documented security awareness exercise;
  • capture, store or use credentials or payment details genuinely submitted by a Target beyond what is necessary to report the outcome of a Simulation;
  • target individuals outside the Customer’s organization, members of the public, minors, or any individual the Customer is not authorized to test;
  • use synthetic voice or video to impersonate any person without that person’s authorization, or to create content that is defamatory, harassing, sexually explicit or otherwise unlawful;
  • use the Platform for political campaigning, market research, telemarketing, debt collection or any purpose unrelated to security training;
  • reverse engineer, decompile, scrape, or attempt to derive the source code or underlying models of the Platform, or use it to build a competing product;
  • circumvent usage limits, security controls, or tenancy boundaries, or probe the Platform other than under a written testing agreement;
  • upload malware, or content that infringes the rights of any third party.

We may suspend access immediately, without notice, where we reasonably believe use breaches this section or creates risk of harm or legal liability. Where practicable we will notify the Customer and work to resolve the issue.

5. Customer Data and data protection

As between the parties, the Customer owns all Customer Data. The Customer grants Callstrike a non-exclusive licence to host, process and transmit Customer Data solely to provide and support the Security Training Services.

In line with our Privacy Policy, when the Platform is used to deliver Security Training Services the Customer acts as data controller and Callstrike acts as data processor, processing personal data solely on the Customer’s documented instructions.

The Customer is responsible for the lawfulness of the Customer Data it submits, including Target contact details and any voice samples used to create a synthetic voice. The Customer must not submit special category data beyond what the Security Training Services require.

We may use aggregated, de-identified data that does not identify the Customer or any individual to operate, secure and improve the Platform.

6. Subscriptions and fees

Access to the Platform is provided under a Subscription. Fees, billing frequency, term and entitlements are those set out in the applicable order form, quote or plan selected by the Customer.

Unless stated otherwise, fees are exclusive of taxes, are payable in advance, and are non-refundable except where required by law. Where a Subscription includes usage-based elements such as call minutes or telephone numbers, those are charged as incurred.

Where a free trial or evaluation is offered, it is provided on an as-is basis and may be modified or withdrawn at any time. We may suspend access where undisputed fees remain unpaid after written notice.

7. Intellectual property

Callstrike and its licensors retain all right, title and interest in the Website, the Platform, its underlying software and models, and all associated intellectual property. No rights are granted other than the limited right to use the Platform under these Terms.

Templates, scenarios and training material we provide remain our property. The Customer may use them within the Platform for its own security training, but may not redistribute or publish them separately.

If the Customer sends us feedback or suggestions, we may use them without restriction or obligation.

8. Confidentiality

Each party may receive information of the other that is marked confidential or would reasonably be understood to be confidential. Simulation results, security findings and Platform pricing are treated as confidential.

Each party will protect the other’s confidential information with at least reasonable care, use it only to perform under these Terms, and disclose it only to personnel and advisers bound by equivalent obligations. These obligations do not apply to information that is public through no fault of the receiving party, independently developed, or required to be disclosed by law.

9. Warranties and disclaimers

We warrant that we will provide the Security Training Services with reasonable skill and care, and that the Platform will perform materially in accordance with its documentation.

Except as expressly stated, the Website and Platform are provided “as is” and we disclaim all other warranties to the fullest extent permitted by law, including implied warranties of merchantability, fitness for a particular purpose and non-infringement.

Security awareness training reduces risk but does not eliminate it. We do not warrant that the Platform will detect every vulnerability, that Targets will respond in any particular way, that Simulations will be delivered without interruption, or that use of the Platform will make the Customer compliant with any law or standard.

10. Liability and indemnity

Nothing in these Terms limits liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, or for any liability that cannot be limited by law.

Subject to the above, neither party is liable for indirect or consequential loss, loss of profits, revenue, goodwill or anticipated savings. Our total aggregate liability arising out of or in connection with these Terms is limited to the fees paid by the Customer in the twelve months preceding the event giving rise to the claim.

The Customer will indemnify Callstrike against claims, losses and costs arising from the Customer’s breach of section 3 (Authorization to run Simulations) or section 4 (Acceptable use), including claims brought by a Target or by any individual whose voice or likeness was used.

11. Term and termination

These Terms apply for as long as the Customer holds a workspace or uses the Platform. A Subscription runs for the term agreed and renews only as set out in the applicable order form or plan.

Either party may terminate for material breach that remains unremedied thirty days after written notice. We may suspend or terminate immediately where section 3 or section 4 is breached.

On termination, access to the Platform ends. The Customer may request an export of Customer Data within thirty days of termination, after which we may delete it in line with our Privacy Policy and our retention obligations. Sections on confidentiality, intellectual property, liability and indemnity survive.

12. General

Changes. We may update these Terms to reflect changes to the Platform, our services or applicable law. Where a change is material we will give reasonable notice. Continued use after a change takes effect constitutes acceptance.

Subcontractors. We use third party providers, including telephony, cloud hosting and speech providers, to deliver the Platform. We remain responsible for their performance of our obligations.

Assignment. Neither party may assign these Terms without the other’s consent, except to an affiliate or in connection with a merger or sale of substantially all assets.

Entire agreement. These Terms, the Privacy Policy and any order form form the entire agreement between the parties. If any provision is held unenforceable, the remainder continues in effect.

Governing law. These Terms are governed by the laws of England and Wales, and the courts of England and Wales have exclusive jurisdiction over any dispute arising out of or in connection with them.

Contact. Questions about these Terms can be sent to support@callstrike.ai.