Privacy Policy

phis3d ("phis3d", "we", "us") provides email and SMS phishing-simulation software for security-awareness training, operated from the United States. This policy explains what we collect and how we use it.

Information we collect

• Information you give us: when you sign up we collect your work email address, company name, and team size. If you contact us, we keep that correspondence.
• Information collected automatically: basic usage and device data (such as pages viewed, browser type, and approximate location) through analytics.

How we use your information

• To respond to your signup and set up your account or a phishing test.
• To operate, maintain, and improve phis3d.
• To send you service and product updates related to your request. We do not send unrelated marketing spam.

Analytics and cookies

We use Google Analytics to understand how visitors use the site. It sets cookies and collects usage data as described in Google's privacy policy. You can block or clear cookies in your browser settings.

Service providers

We share information only with vendors that help us run phis3d, each under their own privacy terms:

• Vercel (website hosting)
• Google Analytics (site analytics)
• Resend (transactional email)
• Google Workspace / Sheets (storing signup details)

We do not sell your personal information.

Simulation data

phis3d is used by organizations to test their own people, with domain ownership verified and consent required before any campaign. We process simulation results on behalf of those organizations. We never store the actual passwords entered on a reveal page.

Data retention

We keep signup and account information for as long as needed to provide the service and for legitimate business purposes. You can ask us to delete your information at any time.

Your choices and rights

You may request access to, correction of, or deletion of your personal information by emailing us. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA.

Children

phis3d is a business product and is not directed to anyone under 16.

Changes

We may update this policy from time to time. Material changes will be reflected by the "last updated" date above.

Contact

Questions about this policy? Email us at zack@msppentesting.com.