Marulk

Terms of Service

Last updated: 28th January 2026

These Terms of Service ("Terms", "Agreement") constitute a legally binding agreement between you and Aubeco AB, a company registered in Sweden with registration number 559518-5157, with its registered address at Stationsvägen 18, Åkersberga, Sweden ("Marulk", "Company", "we", "us", or "our").

By accessing or using the Marulk platform and services, you agree to be bound by these Terms. If you are entering into these Terms on behalf of an organization, you represent and warrant that you have the authority to bind that organization to these Terms.

1. Definitions

  • "Service" means the Marulk phishing simulation and security awareness training platform, including all associated web applications, APIs, integrations, documentation, and related services.
  • "Customer" means the organization or legal entity that subscribes to the Service.
  • "User" means any individual authorized by the Customer to access or use the Service, including administrators and end-users who are targets of phishing simulations or recipients of training.
  • "Subscription" means the Customer's right to access and use the Service during a specified subscription period, subject to payment of applicable fees.
  • "Seat" means a single unit of subscription capacity, representing one active User who may be included in simulations, training, or other Service features.
  • "Organization" means the Customer's company, business entity, or other legal organization that holds the Subscription.
  • "Billing Period" means the monthly period for which Subscription fees are charged.
  • "Customer Data" means any data, content, or information that the Customer or its Users upload, submit, or otherwise provide to the Service.
  • "Confidential Information" means any non-public information disclosed by either party that is designated as confidential or that reasonably should be understood to be confidential.

2. Agreement and Acceptance

2.1. These Terms become effective when you (a) create an account, (b) access or use the Service, or (c) click to accept these Terms where that option is made available. The earlier of these events constitutes your acceptance of these Terms.

2.2. If you do not agree to these Terms, you may not access or use the Service.

2.3. We may update these Terms from time to time. We will notify you of material changes by posting the updated Terms on our website or by sending you a notification. Your continued use of the Service after such changes take effect constitutes your acceptance of the revised Terms.

3. Description of the Service

3.1. Marulk is a software-as-a-service (SaaS) platform that provides phishing simulation and security awareness training tools for organizations. The Service enables Customers to run controlled phishing campaigns, deliver security training to employees, track results, and measure security awareness over time.

3.2. The Service is delivered digitally through our web application and integrations. No physical goods are provided.

3.3. Access to the Service is provided on a per-Seat basis. Each Seat represents one active User who can be included in phishing simulations, training programs, or other features of the Service.

3.4. We may modify, update, or enhance the Service from time to time to improve functionality, security, or user experience. We will use reasonable efforts to notify you of significant changes that may materially affect your use of the Service.

4. Trial Period

4.1. New Customers may be eligible for a free trial period of one (1) month. During the trial, you will have access to the Service features as described at the time of signup.

4.2. To start a trial, you must provide a valid payment method. Your payment method will not be charged during the trial period unless you exceed any applicable usage limits or unless otherwise stated.

4.3. At the end of the trial period, your Subscription will automatically convert to a paid Subscription and your payment method will be charged unless you cancel before the trial ends.

4.4. We reserve the right to modify, limit, or discontinue trial offers at any time without prior notice.

5. Subscription, Billing, and Payment

5.1. Pricing

The Service is priced at eleven United States Dollars (USD 11.00) per active Seat per month. The minimum Subscription is one (1) Seat. All prices are quoted and charged in USD.

5.2. Billing Cycle

Subscriptions are billed monthly in arrears or advance as configured in your billing settings. Each Billing Period begins on the day your paid Subscription started (or the corresponding day of each subsequent month).

5.3. Payment Method

Payment is processed through Stripe. You must provide a valid payment method (such as a credit card or debit card) at signup. By providing a payment method, you authorize us to charge that payment method for all fees due under your Subscription.

5.4. Invoices

Invoices are generated and sent electronically. You may access your invoices through your account dashboard or the Stripe Customer Portal.

5.5. Taxes

Fees are exclusive of applicable taxes. VAT, sales tax, GST, or other applicable taxes will be calculated automatically based on your billing address and added to your invoice. For B2B Customers, you may provide a valid VAT ID or Tax ID to apply any available exemptions or reverse-charge mechanisms.

5.6. Seat Changes

You may increase or decrease the number of Seats in your Subscription at any time. Changes to your Seat count will take effect from the next Billing Period. No proration applies; you will continue to be charged for your current Seat count until the end of the current Billing Period.

5.7. Failed Payments

If a payment fails, we will attempt to charge your payment method again and may notify you of the failure. If payment is not received within a reasonable period, we may suspend or terminate your access to the Service.

5.8. Automatic Renewal

Your Subscription will automatically renew at the end of each Billing Period unless you cancel before the renewal date.

6. Cancellation and Termination

6.1. Cancellation by Customer

You may cancel your Subscription at any time through your account settings or the Stripe Customer Portal. Cancellation will take effect at the end of the current Billing Period. You will retain access to the Service until the end of that period.

6.2. Termination by Marulk

We may suspend or terminate your access to the Service immediately, with or without notice, if:

  • You breach any provision of these Terms;
  • You fail to pay any fees when due;
  • Your use of the Service poses a security risk or may cause harm to us, other customers, or third parties;
  • We are required to do so by law or regulatory authority; or
  • We discontinue the Service (with reasonable notice where practicable).

6.3. Effect of Termination

Upon termination or cancellation, your right to access and use the Service will end. We may delete your Customer Data after a reasonable retention period following termination, unless we are required by law to retain it longer.

7. Refunds and Chargebacks

7.1. When you cancel your Subscription or reduce the number of Seats, you are not entitled to a refund for the current Billing Period or any previous Billing Periods. Your access will continue until the end of the current Billing Period.

7.2. We may, at our sole discretion, issue refunds or credits in exceptional circumstances, such as a significant service failure caused by us.

7.3. If you believe you are entitled to a refund or have a billing dispute, please contact us at support@marulksecurity.com before initiating a chargeback with your payment provider. Chargebacks initiated without prior contact may result in suspension or termination of your account and additional fees.

8. Price Changes

8.1. We may change the price of the Service from time to time. We will provide you with at least thirty (30) days' notice before any price change takes effect.

8.2. Price changes will apply from the start of your next Billing Period following the notice period.

8.3. If you do not agree to a price change, you may cancel your Subscription before the new price takes effect. Your continued use of the Service after the price change constitutes acceptance of the new pricing.

9. Acceptable Use

9.1. You agree to use the Service only for lawful purposes and in accordance with these Terms. The Service is intended for legitimate security awareness and training purposes within your own organization.

9.2. You must not:

  • Use the Service to conduct phishing attacks, simulations, or tests against individuals or organizations without proper authorization;
  • Use the Service to collect credentials, personal data, or other information for malicious or unlawful purposes;
  • Use the Service to harass, threaten, defame, or harm any person or entity;
  • Use the Service to send spam or unsolicited communications;
  • Use the Service to distribute malware, viruses, or other harmful code;
  • Attempt to gain unauthorized access to the Service, other accounts, or any systems or networks connected to the Service;
  • Reverse engineer, decompile, disassemble, or otherwise attempt to derive the source code of the Service;
  • Resell, sublicense, or distribute the Service without our prior written consent;
  • Violate any applicable laws, regulations, or third-party rights; or
  • Interfere with or disrupt the integrity or performance of the Service.

9.3. Violation of this Acceptable Use policy may result in immediate suspension or termination of your access to the Service, without refund.

10. Customer Responsibilities

10.1. You are responsible for ensuring that your use of the Service complies with all applicable laws and regulations, including data protection and privacy laws.

10.2. When conducting phishing simulations or training involving your employees or other individuals, you are responsible for:

  • Obtaining any necessary consents or establishing a lawful basis for processing personal data;
  • Informing individuals appropriately (consistent with your security awareness program objectives);
  • Complying with applicable employment laws and internal policies; and
  • Ensuring that simulations are conducted ethically and do not cause undue harm or distress.

10.3. You are responsible for maintaining the security of your account credentials and for all activities that occur under your account.

11. Intellectual Property

11.1. The Service, including all software, content, designs, trademarks, and documentation, is owned by Marulk or its licensors and is protected by intellectual property laws.

11.2. Subject to these Terms and payment of applicable fees, we grant you a limited, non-exclusive, non-transferable, revocable license to access and use the Service for your internal business purposes during the Subscription term.

11.3. You retain ownership of your Customer Data. By submitting Customer Data to the Service, you grant us a limited license to use, process, and store such data solely to provide the Service to you.

11.4. Nothing in these Terms transfers any intellectual property rights from one party to the other, except as expressly stated.

12. Privacy and Data

12.1. Our collection and use of personal data in connection with the Service is governed by our Privacy Policy, which is incorporated into these Terms by reference.

12.2. As between you and Marulk, you are the data controller for any personal data of your Users that is processed through the Service in connection with phishing simulations and training. We act as a data processor on your behalf for such data.

12.3. You are responsible for ensuring that you have a lawful basis (such as legitimate interest or consent) for processing the personal data of your Users through the Service, and for complying with applicable data protection laws.

12.4. Upon request, we may enter into a Data Processing Agreement (DPA) to address specific data protection requirements.

13. Confidentiality

13.1. Each party agrees to keep confidential any Confidential Information received from the other party and to use such information only for purposes of performing under these Terms.

13.2. Confidential Information does not include information that: (a) is or becomes publicly available without breach of these Terms; (b) was known to the receiving party prior to disclosure; (c) is independently developed by the receiving party without use of Confidential Information; or (d) is lawfully obtained from a third party without restriction.

13.3. A party may disclose Confidential Information if required by law, provided that the disclosing party gives reasonable notice (where permitted) to allow the other party to seek protective measures.

14. Disclaimers

14.1. THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT.

14.2. We do not warrant that the Service will be uninterrupted, error-free, secure, or free from viruses or other harmful components.

14.3. We do not warrant that the Service will meet your specific requirements or achieve any particular results. The effectiveness of security awareness training depends on many factors beyond our control.

14.4. Any advice, recommendations, or information provided through the Service is for general informational purposes only and should not be relied upon as professional security, legal, or compliance advice.

15. Limitation of Liability

15.1. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL MARULK, ITS AFFILIATES, DIRECTORS, OFFICERS, EMPLOYEES, OR AGENTS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF PROFITS, DATA, BUSINESS, OR GOODWILL, ARISING OUT OF OR IN CONNECTION WITH THESE TERMS OR THE USE OF THE SERVICE, REGARDLESS OF THE THEORY OF LIABILITY.

15.2. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, OUR TOTAL AGGREGATE LIABILITY FOR ALL CLAIMS ARISING OUT OF OR RELATING TO THESE TERMS OR THE SERVICE SHALL NOT EXCEED THE TOTAL FEES PAID BY YOU TO US DURING THE TWELVE (12) MONTHS IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO THE CLAIM.

15.3. The limitations in this section apply even if any limited remedy fails of its essential purpose. Some jurisdictions do not allow the exclusion or limitation of certain damages; in such cases, our liability shall be limited to the greatest extent permitted by law.

16. Indemnification

16.1. You agree to indemnify, defend, and hold harmless Marulk, its affiliates, and their respective directors, officers, employees, and agents from and against any claims, damages, losses, liabilities, costs, and expenses (including reasonable attorneys' fees) arising out of or relating to:

  • Your use of the Service;
  • Your Customer Data;
  • Your breach of these Terms;
  • Your violation of any applicable law or third-party rights; or
  • Any claim by a third party (including your employees or Users) arising from your phishing simulations, training programs, or other use of the Service.

17. Term and Survival

17.1. These Terms are effective from the date you first accept them and continue until your Subscription is terminated or cancelled.

17.2. The following sections shall survive termination or expiration of these Terms: Definitions, Intellectual Property, Privacy and Data, Confidentiality, Disclaimers, Limitation of Liability, Indemnification, Term and Survival, General Provisions, and Governing Law and Dispute Resolution.

18. General Provisions

18.1. Entire Agreement

These Terms, together with our Privacy Policy and any other documents expressly incorporated by reference, constitute the entire agreement between you and Marulk regarding the Service and supersede all prior agreements and understandings.

18.2. Severability

If any provision of these Terms is found to be invalid or unenforceable, that provision shall be enforced to the maximum extent permissible, and the remaining provisions shall remain in full force and effect.

18.3. Waiver

Our failure to enforce any right or provision of these Terms shall not constitute a waiver of such right or provision.

18.4. Assignment

You may not assign or transfer your rights or obligations under these Terms without our prior written consent. We may assign our rights and obligations under these Terms to an affiliate or in connection with a merger, acquisition, or sale of assets.

18.5. Force Majeure

Neither party shall be liable for any failure or delay in performance due to circumstances beyond its reasonable control, including but not limited to acts of God, natural disasters, war, terrorism, labor disputes, government actions, or failures of third-party services.

18.6. Notices

Notices under these Terms may be sent by email to the address associated with your account (for notices to you) or to support@marulksecurity.com (for notices to us). Notices are deemed received when sent, if sent by email during normal business hours, or on the next business day otherwise.

18.7. Independent Contractors

The parties are independent contractors. Nothing in these Terms creates a partnership, joint venture, agency, or employment relationship.

19. Governing Law and Dispute Resolution

19.1. These Terms shall be governed by and construed in accordance with the laws of Sweden, without regard to its conflict of law principles.

19.2. Any dispute arising out of or relating to these Terms or the Service shall be subject to the exclusive jurisdiction of the courts of Sweden.

19.3. Before initiating formal legal proceedings, the parties agree to attempt to resolve any dispute through good-faith negotiations.

20. Contact Information

If you have any questions about these Terms, your Subscription, or billing, please contact us:

Company: Aubeco AB

Address: Stationsvägen 18, Åkersberga, Sweden

Registration Number: 559518-5157

Email: support@marulksecurity.com

By using Marulk, you acknowledge that you have read, understood, and agree to be bound by these Terms of Service.