Terms of Service

These terms are written in plain English so you actually know what you're agreeing to. By creating an account or using ScamDrill, you agree to them — so please read them.

Effective Date: July 3, 2026  ·  Last updated: July 3, 2026

What ScamDrill is

ScamDrill is an educational and training service that sends simulated phishing emails and SMS text messages to help you and your loved ones learn to recognize and avoid real scams. The service is designed for individual guardians (like parents or adult children) who want to train one or more learners, as well as organizations that want to improve their employees' scam awareness.

When you sign up, you create a guardian or organization account and invite learners (family members, friends, employees, or anyone else you want to train). Once they opt in, we send them realistic but completely safe scam simulations. When they interact with a simulation, they're directed to an educational lesson explaining the red flags. Guardians and administrators can see progress and analytics on their dashboard.

ScamDrill is strictly an educational and training platform. It is not a security product, insurance policy, or guarantee against fraud. The service is intended to supplement — not replace — existing security measures and good judgment.

What ScamDrill is not

ScamDrill is an educational tool, not a security product. Specifically:

  • We are not an antivirus, firewall, or malware protection service
  • We do not guarantee that a trained learner will never fall for a real scam
  • We are not a substitute for email security systems, password managers, or multi-factor authentication
  • We cannot prevent real scammers from targeting you or your loved ones
  • We do not provide emergency fraud recovery or financial restitution if a real scam occurs
  • Our Second Opinion email checking feature (heuristic and AI-powered analysis of forwarded emails) is an indicator only — it is not a guarantee that an email is safe, legitimate, or malicious, and it should never be used as the sole basis for clicking links, sharing information, or making financial decisions

ScamDrill trains people to be more aware. It doesn't eliminate risk. Real scams are sophisticated and evolving, and no training or automated check can guarantee immunity.

Who can use ScamDrill

Guardians: You must be at least 18 years old to create or use a guardian account. We confirm your age at signup, or — for social-login signups — on your first sign-in. You're responsible for the account and any learners you invite.

Learners under 13: A parent or legal guardian must provide explicit written consent before we collect any information or send simulations. We'll ask for this consent at signup.

Learners 13 and older: The learner themselves must opt in to the service. We require their active consent before sending any simulations.

By using ScamDrill, you confirm that you have the authority to consent on behalf of any minors in your account.

Changes to these terms

We may update these terms from time to time — for example, when we add a feature, change pricing, or need to reflect a new legal requirement. When we make a material change, we'll update the "Last updated" date at the top and let account holders know by email or an in-app notice before the change takes effect.

If you keep using ScamDrill after an update takes effect, that means you accept the revised terms. If you don't agree with a change, you can stop using the service and close your account before it takes effect. We keep prior versions on file; email legal@scamdrill.com if you'd like an earlier version.

Acceptable use

You agree not to use ScamDrill in any way that harms others or violates the law. Specifically:

  • Don't sign up someone without their knowledge or consent (except parents obtaining parental consent for minors under 13)
  • Don't use the service to harass, intimidate, or embarrass anyone
  • Don't use learner data for any purpose other than scam awareness training
  • Don't attempt to hack, reverse-engineer, or interfere with our systems
  • Don't resell or redistribute ScamDrill services or content
  • Don't use ScamDrill to deliver real phishing attacks or scams

If you violate these rules, we'll terminate your account and may report you to law enforcement if necessary.

Legal compliance

You are responsible for ensuring that your use of ScamDrill complies with all applicable local, state, national, and international laws and regulations, including but not limited to:

  • Anti-phishing and computer fraud laws (such as the CAN-SPAM Act, CFAA, or equivalent laws in your jurisdiction)
  • Data protection and privacy regulations (such as GDPR, CCPA, PIPEDA, or equivalent laws in your jurisdiction)
  • Employment and workplace regulations governing employee monitoring and training
  • Laws governing electronic communications and consent requirements
  • Laws governing the protection of minors online (such as COPPA or equivalent)

Organizations are responsible for obtaining any required internal approvals (such as HR, legal, or IT department sign-off) before deploying ScamDrill to employees. ScamDrill is not responsible for any legal consequences arising from your failure to comply with applicable laws or to obtain required approvals.

If you are unsure whether your use of ScamDrill complies with applicable laws, you should consult a legal professional before using the service.

Your responsibilities and promises

When you use ScamDrill, you promise us that:

  • Everything you tell us at signup (and afterward) is true and accurate, and you'll keep it up to date;
  • You're at least 18 and have the legal capacity to agree to these terms;
  • You have the authority to add each learner you invite — meaning either the learner will consent for themselves, or, for a child under 13, you are their parent or legal guardian and can consent on their behalf;
  • You'll keep your login credentials confidential, and you're responsible for everything that happens under your account;
  • You won't access ScamDrill through bots, scrapers, or other automated means, except through an API we've expressly made available to you;
  • Your use of the service won't break any law that applies to you.

Your own security still matters. ScamDrill is training — it works best alongside good security habits and can't make up for their absence. You're responsible for keeping your own devices, accounts, and networks secure: using up-to-date software, strong and unique passwords, and multi-factor authentication where it's offered; safeguarding your credentials and never sharing them with anyone who contacts you claiming to be ScamDrill (we will never ask for your password); acting promptly on alerts and warnings; and reporting suspected real fraud through the proper channels, such as your bank and law enforcement. Not following basic security practices can contribute to losses that no training or automated check could have prevented.

About our simulations

No real harm: All simulations are completely safe. There is never any malware, data theft, or actual financial risk. If a learner clicks a link in a simulation, they're directed to a ScamDrill educational page, never to a malicious website.

Educational content: Every simulation includes a clear, warm lesson explaining what the scam was, which red flags were present, and how to spot similar attempts in the future.

Transparent: Learners always know they're being trained. Our simulations are based on real scam patterns, but we always make it clear when they're participating in a drill.

Frequency: Simulations are sent on a semi-random schedule, typically every 7 to 30 days. You can adjust the frequency from your dashboard on paid plans. Learners cannot predict exactly when one will arrive, which mirrors how real scams work.

Second Opinion email checking

The Family plan (including the legacy Family+ plan) and the standalone Second Opinion add-on let you (or a learner) forward a suspicious email to check@scamdrill.com and receive an automated verdict — for example, "looks safe," "looks suspicious," or "looks like a scam" — together with a short explanation of what we noticed. This verdict is generated by a combination of heuristic rules (such as header checks, link and domain analysis, sender-reputation lookups, and content pattern matching) and AI / large-language-model analysis of the forwarded message.

The verdict is an indicator, not a guarantee. Heuristic checks and AI models can — and sometimes do — make mistakes. They can flag a perfectly legitimate email as suspicious (a false positive), and they can rate a real scam as safe (a false negative). They can be fooled by novel or carefully crafted attacks, by attackers who deliberately mimic legitimate senders, by emails that depend on context the model cannot see (such as whether you actually placed an order, opened an account, or know the sender), and by changes in scam tactics that postdate the model's training data. The verdict reflects only what is visible in the message you forwarded, at the moment you forwarded it, using the tools available to us at that time. It is not a substitute for your own judgment, and it is not a substitute for proper email security, anti-malware, or anti-fraud controls on your devices, your email provider, or your financial accounts.

You should treat any Second Opinion verdict as one input among several. Do not rely on a Second Opinion verdict as the sole basis for clicking links, opening attachments, replying with personal or financial information, transferring money, sharing credentials or one-time codes, or making any other consequential decision. When in doubt, verify directly with the purported sender using a phone number, app, or website you obtained independently — not from the email itself.

No warranty; you assume the risk. The Second Opinion email checking feature is provided "as is" and without warranty of any kind, whether express or implied, including warranties of accuracy, completeness, fitness for a particular purpose, or non-infringement. To the fullest extent permitted by law, ScamDrill will not be liable for any loss, damage, fraud, identity theft, financial harm, data breach, missed legitimate communication, or other harm that you, a learner, or any third party suffers as a result of relying on (or not relying on) a Second Opinion verdict — whether the verdict was a false positive, a false negative, incomplete, delayed, or otherwise inaccurate. Your use of the feature is at your own risk, and the limitations in the "Limitation of liability" section below apply in full to any Second Opinion verdict.

Scam reports you submit

ScamDrill lets anyone report a scam — in the mobile app or on our website, with or without an account. Reporting is optional, and you decide what goes into the report.

What you give us permission to do. When you send a report, you grant ScamDrill a worldwide, royalty-free, non-exclusive license to store it, have a person on our team read it, and publish a redacted summary of the scam you described — in our public feed, in the app, in our training material, and in the threat data we use to warn other people. That license lasts as long as the summary is useful as a warning and survives the closure of your account, because a published warning can't be un-warned. It covers the description of the scam. It does not cover your identity.

What we strip before anything is published. Names, email addresses, phone numbers, account numbers, and links are removed, and the message is rewritten rather than reproduced word for word. We never publish your name or your contact details, and we never attach your account to a published summary. If you left an email so we could follow up, it stays private.

Don't send us what you can't share. Send what the scammer sent you — not your own passwords, verification codes, or account numbers, and not another person's private information. If you're reporting something that happened to someone else, describe it without details about them that they wouldn't want published.

Takedown. If a published summary contains something it shouldn't, email support@scamdrill.com and we'll correct or remove it. Because reports are anonymous by design, we usually can't match a request to a specific submission — tell us which published summary you mean.

Accuracy. A report is one person's account of what happened to them. We read reports before publishing anything, but we can't verify every claim. A published summary is a warning about a pattern — not a finding of fact about any named business or person.

Email communications

Once you sign up — or once a learner accepts a guardian's invitation — ScamDrill will send email to the address on file. We group those messages into the categories below so you know exactly what to expect, who receives what, and how to turn off the optional ones.

Account and administrative emails (transactional)

These are required to operate the service. They are sent to guardians, organization administrators, and any newsletter or admin recipient with an account. You cannot opt out of these while your account is active; closing your account stops them.

  • Account verification, sign-in, and password-reset emails sent through our authentication provider when you create an account, change your email address, or request a password reset.
  • Billing emails sent in connection with paid subscriptions, including payment receipts, upcoming-renewal notices, plan-change confirmations, failed-payment notices, refund confirmations, and cancellation confirmations. Some of these are sent by Stripe on our behalf.
  • Service notices when we make material changes to these Terms, the Privacy Policy, the SMS program, or the security of your account.
  • Account-closure and data-deletion confirmations when you (or a learner) close an account or request deletion of personal information.

Emails sent to learners

Once a learner has accepted a guardian's or administrator's invitation, ScamDrill sends them the following emails. Every learner-facing email includes a one-click unsubscribe link that immediately stops all simulations and follow-ups for that learner.

  • Consent invitation — sent the first time a guardian or administrator adds the learner. The learner must actively click through and consent before any simulations are sent. A guardian or administrator can re-send this invitation if it expires or is missed.
  • Simulation emails — the realistic but harmless training drills themselves, sent on the semi-random schedule described in the "About our simulations" section above. Clicking any link in a simulation always leads to a ScamDrill educational debrief page, never to a malicious site.
  • Educational follow-up email ("Did you spot the scam?") — sent automatically a few days after a simulation if the learner did not report it and did not click any of the links. The follow-up explains what the simulation was, lists the red flags the learner could have used to spot it, and links to the learner's progress page. The purpose is to turn a missed drill into a teaching moment. Learners who correctly identify a simulation (by reporting it to spam@scamdrill.com or by clicking through to the debrief page) do not receive the follow-up — the catch is recorded directly in the dashboard.
  • Workforce security-awareness training invitations and reminders — sent only to learners whose organization has enabled annual compliance training. These include the initial training invitation and, at the administrator's discretion, periodic reminders if the training is not yet complete.

Notifications sent to guardians and account owners

Each of the following notifications can be turned on or off independently from Dashboard → Settings → Notification preferences. They are on by default for new accounts.

  • Click alert — a real-time email when one of your learners clicks a link in a simulated scam, so you can follow up with them while the moment is fresh.
  • Real-scam-caught alert — an email when something you (or a learner) forwarded to check@scamdrill.com is analyzed and flagged as a real (non-simulation) scam.
  • Monthly family digest — a once-per-month summary of your learners' activity, including reports submitted, points and streaks earned, and any new achievements.

Notifications sent to organization administrators

For organization plans, administrators receive the following emails. The digests can be toggled from the same notification-preferences screen as the family notifications above.

  • Administrator invitation — sent when an existing owner or administrator invites a new administrator to manage the organization on ScamDrill.
  • Monthly click digest — an aggregated summary of simulated-scam clicks across all learners in the organization.
  • Monthly real-scam digest — an aggregated summary of real (non-simulation) scams that learners forwarded to ScamDrill during the period.

Monthly Scam-Trend Report (for individual guardians)

When you sign up for ScamDrill as an individual guardian, we add you to our Monthly Scam-Trend Report by default. The report is a once-per-month email summarizing the scam patterns and trends we've seen across our network. You can unsubscribe at any time — either from Dashboard → Settings → Notification preferences or via the unsubscribe link at the bottom of any newsletter email. Organization administrators and learners are not pre-enrolled in this report; they can subscribe via the newsletter form on our website if they wish.

Other marketing emails

Product announcements that are not tied to your account, public newsletter content, scam-trend roundups beyond the monthly report, and other marketing emails are sent only after you explicitly opt in (for example, by submitting the newsletter form on our website). Every marketing email contains an unsubscribe link, and unsubscribing takes effect immediately.

How to control what you receive

  • Learners can stop simulations and follow-ups at any time by clicking the unsubscribe link at the bottom of any ScamDrill email, or by replying STOP to any ScamDrill text (see the SMS program section below).
  • Guardians and administrators can turn each optional notification on or off independently from Dashboard → Settings → Notification preferences, and can disable SMS for any individual learner by switching that learner to "Email only" from the dashboard.
  • Newsletter subscribers can unsubscribe with the link at the bottom of any newsletter email.
  • Account-related, billing, security, and consent emails are required for the service to function and cannot be turned off while the account is active. Closing the account stops them.

Where Stripe (billing), our authentication provider (sign-in and password-reset), or our deliverability provider (Resend) sends email on our behalf, those messages are governed by their own terms in addition to ours and our Privacy Policy.

Cookies and advertising

Our website and app use essential cookies to run the service and, subject to your consent, advertising and analytics cookies (including Google Ads and the Meta pixel) to measure our advertising. In regions that require opt-in consent (the EU/EEA, UK, and Switzerland) these stay off until you accept; elsewhere they are on by default and you can opt out at any time. Full details, and the opt-out control, are in our Privacy Policy.

SMS program terms

Program name: ScamDrill.

Program description: ScamDrill is a consent-based scam-awareness training program. The single opt-in path is a web consent form (sample at app.scamdrill.com/onboard/sample) on which the learner self-enters their own mobile phone number alongside the SMS-consent checkbox. The learner reaches the consent form via a tokenized email invitation sent after a ScamDrill account holder ("guardian") adds the learner's name and email — the guardian does not provide a phone number. ScamDrill never sends SMS to any phone number prior to this web opt-in. After the learner submits the consent form, ScamDrill sends two categories of SMS messages to the number the learner entered: (1) periodic training simulations — realistic but harmless text messages modeled on real scam patterns, each prefixed with [ScamDrill TRAINING] so the recipient can always tell the message is sanctioned training content; and (2) occasional service messages such as weekly progress summaries, opt-in confirmations, and HELP/STOP replies. Links in training SMS use ScamDrill-owned brand short domain smdl.app, which 302-redirects to a ScamDrill educational debrief page. No marketing or promotional messages are sent through this program.

Message and data rates: Message and data rates may apply. ScamDrill does not charge for SMS messages, but your mobile carrier's standard messaging and data rates will apply to every message sent and received. Check with your carrier if you are unsure of your plan's rates.

Message frequency: Message frequency varies based on the learner's training plan and the guardian's configured settings. Most learners receive between 2 and 8 messages per month. Guardians can adjust the frequency, pause simulations, or switch a learner to email-only at any time from their dashboard. Learners can stop messages immediately by replying STOP to any text or using the unsubscribe link at the bottom of any simulation email.

Support contact information: For help with the SMS program, email support@scamdrill.com. You can also reach us at hello@scamdrill.com.

Opt-out and help instructions: Reply STOP to any ScamDrill text message at any time to unsubscribe from the SMS program. After you send STOP, you will receive one final confirmation message and no further texts will be sent to that number. Reply HELP to any ScamDrill text message to receive information about the program and contact details for support. Both STOP and HELP are free to send on all major US carriers. Learners can also fully unsubscribe from both email and SMS simulations by clicking the unsubscribe link at the bottom of any ScamDrill simulation email, and guardians can disable SMS for any learner by switching the learner's simulation type to "Email only" from the guardian dashboard.

Carrier disclaimer: Mobile carriers are not liable for delayed or undelivered messages.

Privacy: Information you provide to the SMS program is handled in accordance with our Privacy Policy, including the SMS Messaging section. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging originator opt-in data and consent are excluded from all categories of personal information sharing and will not be shared with any third parties. Phone numbers and consent records are processed only by service providers strictly necessary to deliver the messages (currently Twilio Inc., our A2P 10DLC carrier) under contractual confidentiality and data-protection terms.

Subscriptions and billing

Payment method: We process subscriptions through Stripe, a secure third-party payment processor. We never see or store your full credit card information.

Billing frequency: You can choose monthly or annual billing. The Family plan is $9/mo (or $84/yr) and includes email and SMS simulations, AI email checking, advanced reports, and priority support, with 4 learner slots included; additional learner slots are available for $2/mo (or $19/yr) each, prorated automatically when added or removed. Free users can add second opinion AI email checking for $2.99/mo (or $29.99/yr). The legacy Family+ plan ($15/mo or $144/yr, 12 learner slots) is no longer offered to new subscribers; existing Family+ subscriptions are honored on their original terms. Monthly subscriptions renew automatically every 30 days. Annual subscriptions renew every 365 days.

Cancellation: You can cancel your subscription at any time from your account settings. Cancellations take effect at the end of your current billing period. You won't be charged again after cancellation.

30-day money-back guarantee: We offer a full refund on any paid-plan charge if you request it within 30 days of that charge — no questions asked. Email support@scamdrill.com (or use the in-app help link) with the email on your account and we'll process the refund to your original payment method. The guarantee applies to new subscriptions, renewals, and the AI Email Checking add-on. After the 30-day window, refunds are at our discretion and we'll evaluate the circumstances on a case-by-case basis.

Price changes: We may adjust pricing in the future. If we do, we'll notify you at least 30 days before the change. If you don't agree, you can cancel before the new pricing takes effect.

Intellectual property

Our content: All scam simulation templates, educational lessons, lesson content, and branded materials are the exclusive property of ScamDrill. You can't copy, modify, or redistribute this content without permission.

Your data: You own the data you provide (like names, emails, or notes about your learners). We have a license to use this data to operate ScamDrill, but you can delete it anytime. Scam reports are covered separately — see Scam reports you submit.

Feedback: If you send us ideas, suggestions, or feedback about ScamDrill, we can use them freely to improve the service without any obligation or payment to you.

Disclaimers and assumption of risk

The service is provided "as is." To the fullest extent permitted by law, ScamDrill and its suppliers disclaim all warranties of any kind, whether express or implied — including any implied warranties of merchantability, fitness for a particular purpose, title, and non-infringement, and any warranties arising from a course of dealing or usage of trade. We don't warrant that the service will be uninterrupted, timely, secure, or error-free, that simulations or verdicts will always be delivered, or that any defect will be corrected.

No guarantee against scams. No training program or automated check can detect or prevent every scam. Scammers constantly change their tactics, and the signals, heuristics, and data sources we rely on change over time. The absence of a warning, a "looks safe" verdict, or the completion of training is never a guarantee that a message, request, link, counterparty, or transaction is legitimate or safe. You remain responsible for exercising your own judgment before sending money, sharing information, clicking links, or acting on any communication, and you assume the risk of doing so.

Not professional advice. ScamDrill's simulations, lessons, verdicts, alerts, glossary, and other content are for general educational purposes only. They are not legal, financial, tax, insurance, or professional security advice, and they don't create any advisor, fiduciary, or professional relationship between you and ScamDrill. For advice about your specific situation, consult a qualified professional.

Third-party links and services. The service may link to or rely on third-party websites, tools, and providers (for example, our payment, authentication, email-delivery, and messaging partners). We don't control those third parties and aren't responsible for their content, products, availability, security, or privacy practices. A link isn't an endorsement, and you use third-party sites and services at your own risk and subject to their terms.

Some places don't allow certain warranty exclusions, so parts of this section may not apply to you. Where that's the case, those warranties are limited to the shortest period and the narrowest scope the law allows.

Limitation of liability

ScamDrill is an educational and training service only. We provide simulated scam awareness training to help individuals and organizations improve their ability to recognize fraud. However, no training program can guarantee protection against all scams, and the effectiveness of training depends on many factors outside our control.

By using ScamDrill, you acknowledge and agree that:

  • ScamDrill is not liable for any individual learner, guardian, employee, or organization falling victim to any scam, phishing attack, fraud, or social engineering attempt, whether or not the victim has completed ScamDrill training
  • ScamDrill does not guarantee that training will prevent financial losses, data breaches, identity theft, or any other harm resulting from real-world scams
  • ScamDrill is provided "as is" without any warranty of any kind, whether express or implied, including warranties of merchantability, fitness for a particular purpose, or non-infringement
  • We're not liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to loss of money, data, revenue, profits, business opportunities, or goodwill
  • To the fullest extent permitted by law, our total aggregate liability to you for all claims arising from or related to the service is limited to the greater of (a) the fees you actually paid to ScamDrill in the 12 months before the event giving rise to the claim, or (b) one hundred U.S. dollars ($100)
  • Organizations using ScamDrill remain solely responsible for their own cybersecurity posture, policies, and incident response, and ScamDrill's training does not constitute a cybersecurity audit, assessment, or certification
  • ScamDrill is not liable for any loss, damage, fraud, identity theft, financial harm, missed legitimate communication, or other harm resulting from reliance on (or non-reliance on) a Second Opinion email checking verdict, whether that verdict was a false positive, a false negative, or otherwise inaccurate. Heuristic and AI-powered email analysis is an indicator only and is not a guarantee of email safety, legitimacy, or maliciousness

Nothing in this section limits our liability for fraud, gross negligence, or data breaches directly caused by our negligence.

No liability for scammers and other third parties

ScamDrill trains people to recognize fraud — it does not, and cannot, control the people who commit it. We are not responsible for the acts or omissions of any third-party bad actor, including scammers, phishers, fraudsters, impersonators, identity thieves, spoofers, or the operators of malicious websites, apps, calls, or messaging campaigns.

We are not liable for any loss, damage, or harm caused by such third parties — regardless of whether ScamDrill trained the person involved, sent a simulation on a similar theme, analyzed a related message, or flagged (or failed to flag) the activity in question. Recovering from real fraud depends on factors outside our control, including the payment method used, how quickly you act, and the policies and decisions of your bank, card networks, and government agencies. ScamDrill does not provide fraud recovery, reimbursement, or restitution, and nothing in these terms makes us responsible for money you lose to a scam.

Indemnification

You agree to defend, indemnify, and hold harmless ScamDrill and its owners, officers, employees, contractors, and agents from and against any claims, demands, liabilities, damages, losses, costs, and expenses — including reasonable attorneys' fees — that arise out of or relate to:

  • Your use of the service, or use by anyone acting under your account;
  • Your breach of these terms, or of any law or regulation;
  • Adding, inviting, or enrolling any learner, employee, or other person without the consent or authority these terms require — including sending simulations to someone who didn't properly opt in;
  • An organization's failure to obtain the internal approvals (HR, legal, IT, or otherwise) or to provide the notices its use of ScamDrill requires;
  • Any information you submit that is false, inaccurate, incomplete, or misleading;
  • Your violation of anyone else's rights, including privacy and intellectual-property rights; or
  • Your failure to follow reasonable security practices, or to act on an alert, warning, verdict, or recommendation, where that failure contributed to a loss.

We may take over the exclusive defense of any matter subject to indemnification by you, at your expense, and you agree to cooperate with us. You won't settle any such matter in a way that affects ScamDrill without our prior written consent.

Service availability and changes

We work hard to keep ScamDrill running, but we can't promise it will always be available. The service may be interrupted for maintenance, updates, technical problems, or reasons beyond our control, and we're not liable for any downtime, delay, or resulting loss. We may change, add, suspend, or discontinue any part of the service — including features, simulations, plans, and integrations — at any time, and we'll give reasonable notice of material changes where practical.

We also reserve the right (but not the obligation) to monitor the service for compliance with these terms, to investigate suspected violations, and to refuse, restrict, suspend, or limit anyone's access at our discretion to protect the service, our users, and our rights.

Termination

You can terminate anytime: Cancel your subscription at any time, and your access ends at the end of your billing period.

We can terminate anytime: If you violate these terms, harass learners, or engage in illegal activity, we'll suspend or terminate your account immediately.

Data deletion: When you close your account, we'll delete all your personal information (name, email, billing info) within 30 days. Learner data is deleted within 30 days. We may retain aggregated, anonymized data for analytics purposes (e.g., "the average click-through rate on IRS scams").

Your data and backups: While we take reasonable steps to back up our systems, you're responsible for keeping your own copies of anything important to you. To the fullest extent permitted by law, we aren't liable for any loss or corruption of data, and you release us from claims arising from it.

What survives: Sections that by their nature should continue after your account ends — including the disclaimers, limitation of liability, no-liability-for-third-parties, indemnification, intellectual-property, governing-law and dispute-resolution, and general terms — remain in effect after termination.

Governing law & dispute resolution

These terms are governed by the laws of the State of New Mexico, USA, without regard to its conflict-of-law rules. The Federal Arbitration Act governs the interpretation and enforcement of the arbitration provisions in this section.

Binding arbitration: Except for the carve-outs below, you and ScamDrill agree to resolve any dispute, claim, or controversy arising out of or relating to these terms or the service through final and binding individual arbitration — not in court. Arbitration will be administered by the American Arbitration Association (AAA) under its Consumer Arbitration Rules, and will take place in Bernalillo County, New Mexico, or remotely by phone or video. The arbitrator's decision is final and may be entered as a judgment in any court of competent jurisdiction.

Class action waiver: You and ScamDrill agree that disputes will be resolved on an individual basis only. Neither party may bring or participate in a class action, class arbitration, collective action, or representative proceeding. The arbitrator may award relief only in favor of the individual party seeking relief, and only to the extent necessary to provide that relief. If this waiver is found unenforceable, the entire arbitration provision in this section is void.

Small-claims carve-out: Either party may bring an individual claim in small-claims court if the claim qualifies under that court's rules and stays in that court. Either party may also seek injunctive or equitable relief in court to protect intellectual property or stop unauthorized access to the service.

30-day opt-out: You can opt out of the arbitration agreement and class action waiver above. To opt out, send a written notice to legal@scamdrill.com with the subject line "Arbitration Opt-Out" within 30 days of first accepting these terms. Include your full name and the email address on your account. Opting out won't affect any other part of these terms, and you can still use the service normally.

Venue for non-arbitrable matters: For any claim that isn't subject to arbitration (such as small-claims actions and the equitable-relief carve-out above), you and ScamDrill agree to the exclusive jurisdiction and venue of the state and federal courts located in Bernalillo County, New Mexico, and consent to personal jurisdiction in those courts.

California residents

Under California Civil Code Section 1789.3, California users are entitled to this notice: the Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs can be reached by mail at 1625 North Market Blvd., Suite N 112, Sacramento, CA 95834, or by phone at (800) 952-5210. Any rights or remedies available to you under California law remain subject to the disclaimers, limitations of liability, and other provisions of these terms, to the fullest extent the law allows.

General terms

Entire agreement. These terms, together with our Privacy Policy (which is part of these terms by reference) and any plan or order details shown at checkout, are the entire agreement between you and ScamDrill about the service, and they replace any earlier agreements on the same subject.

Severability. If any part of these terms is found to be unenforceable, that part will be limited or removed to the minimum extent necessary, and the rest of the terms stay in full force.

No waiver. If we don't enforce a right or provision, that's not a waiver — we can still enforce it later.

Assignment. You can't transfer your rights or obligations under these terms without our written consent. We may assign ours — for example, in connection with a merger, acquisition, or sale of assets.

No agency. These terms don't create any partnership, joint venture, employment, or agency relationship between you and ScamDrill.

Force majeure. We're not responsible for any failure or delay caused by events beyond our reasonable control, such as outages, natural disasters, labor disputes, acts of government, or failures of third-party providers.

Electronic communications and signatures. By using ScamDrill, you agree that we can communicate with you electronically, and that electronic agreements, notices, disclosures, and records satisfy any legal requirement that they be in writing. You consent to do business with us electronically and to the use of electronic signatures.

Contact us

Questions about these terms? Get in touch:

  • Legal questions: legal@scamdrill.com
  • General inquiries: hello@scamdrill.com