Privacy Policy

Effective Date: June 17, 2025

Applies to: school.phishingbox.com

Contact: privacy@phishingbox.com

1. Introduction

PhishingBox, LLC and its affiliates ("PhishingBox," "we," "our," or "us") are committed to protecting your privacy. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal information when you access and use our customer portals: portal.phishingbox.com and school.phishingbox.com (collectively, the "Portals"). These Portals are designed for registered clients and authorized users to access services such as security awareness training and phishing simulations.

For information regarding our public website's privacy practices, please refer to our Public Website Privacy Policy.

2. Information We Collect

a. Information You Provide:
When you interact with our Portals, we may collect personal information that you voluntarily provide, including:

  • Account Information: Name, email address, organization, job title, and login credentials.
  • Support Communications: Information you provide when contacting our support team.

b. Information Collected Automatically:
To ensure the security and functionality of our Portals, we collect certain information automatically:

  • Technical Data: IP address, browser type, operating system, and device information.
  • Usage Data: Login timestamps, accessed features, and session duration.

This data is collected solely to maintain the integrity and performance of our services and is not used for profiling or marketing purposes.

3. Use of Cookies

Our Portals utilize only essential cookies necessary for:

  • Authentication
  • Security
  • Functionality

We do not employ cookies for analytics, advertising, or tracking purposes within the Portals.

For detailed information, please refer to our Cookie Policy – Customer Portals.

4. How We Use Your Information

We process your personal information to:

  • Provide Services
  • Maintain Security
  • Support Communication

Our processing activities are based on:

  • Contractual Necessity
  • Legitimate Interests

5. Data Sharing and Disclosure

We do not sell or rent your personal information. We may share your data with:

  • Service Providers
  • Legal Authorities

All third-party engagements are governed by data processing agreements ensuring compliance with applicable data protection laws.

6. Data Retention

We retain your personal information only as long as necessary to:

  • Fulfill the purposes outlined in this policy
  • Comply with legal obligations
  • Resolve disputes and enforce our agreements

Upon account termination or upon your request, we will delete or anonymize your personal data, unless retention is required by law.

7. Data Security

We implement appropriate technical and organizational measures including:

  • Encryption
  • Access Controls
  • Regular Audits

Despite our efforts, no system can be completely secure; therefore, we cannot guarantee absolute security.

8. Your Rights

Under applicable data protection laws, you have the right to:

  • Access
  • Rectify
  • Erase
  • Restrict Processing
  • Data Portability
  • Object

To exercise these rights, contact: privacy@phishingbox.com

9. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated Effective Date.

10. Contact Us

PhishingBox Data Protection Officer
Email: privacy@phishingbox.com
Phone: +1 (877) 634-6847
Address: 400 E Vine St. #301, Lexington, KY 40507, USA

Back to Login