Terms of Service

CyberScale — cyberscale.bxar.io

Operated by BXAR Inc.

Effective Date: March 31, 2026

Last Updated: March 31, 2026

1. Agreement to Terms

1.1 Binding Agreement

These Terms of Service ("Terms") constitute a legally binding agreement between you and BXAR Inc., a Canadian corporation headquartered in Montreal, Quebec ("BXAR," "we," "us," or "our"). By accessing or using the CyberScale platform at cyberscale.bxar.io ("Platform"), you agree to be bound by these Terms.

1.2 Capacity to Agree

(a) Adult Users (18+): By using the Platform, you represent that you have the legal capacity to enter into a binding contract.

(b) Children and Teenagers (Under 18): Individuals under 18 years of age do not create accounts and do not agree to these Terms directly. A parent or legal guardian must create an account and accept these Terms on their behalf. By creating a family group and sharing the join code, parents and guardians accept these Terms on behalf of the children who join using that code.

1.3 Additional Policies

These Terms incorporate by reference our Privacy Policy and our How We Protect Kids page. Please read all three documents carefully.

2. The Platform

2.1 Description

CyberScale is a free cybersecurity awareness education platform designed for children and teenagers aged 8–17. The Platform offers three age-appropriate learning tracks: Explorer (ages 8–10), Defender (ages 11–13), and Operative (ages 14–17).

2.2 Educational Nature

The Platform is designed for educational purposes only. It is NOT: professional security training or certification, legal or professional advice of any kind, a substitute for professional cybersecurity services, or a guarantee against cyberattacks or security incidents. All content is provided for general educational awareness and should not be relied upon as professional guidance.

2.3 Free Service

The core educational content of the Platform is provided free of charge. We may introduce optional premium features or enhancements in the future. Any such features will be clearly identified as optional and the core curriculum will remain free.

2.4 Availability

We make reasonable efforts to maintain availability of the Platform but do not guarantee uninterrupted, error-free, or continuous access. We may suspend or discontinue the Platform or any part of it at any time with or without notice.

2.5 Content Access Tiers

Content is organized by age-appropriate tiers: Explorer, Defender, and Operative. Users may access content at their assigned tier and below. Parents may change a child's assigned tier at any time from the parent dashboard. BXAR is not responsible if a parent or guardian selects an age tier that is not appropriate for their child.

3. Accounts

3.1 Account Types

The Platform offers three account types, all of which require the account holder to be 18 years of age or older:

(a) Parent Accounts: Created by parents or legal guardians (18+) to manage child profiles for children of any age under 18.

(b) Educator Accounts: Created by teachers or instructors (18+) to create and manage classroom environments.

(c) Institutional Admin Accounts: Created by authorized representatives (18+) for organizational or school-wide deployments.

Children and teenagers do not create accounts. They access the Platform only through a child profile managed by a parent, guardian, or educator account holder.

3.2 Account Creation

When creating an account, you agree to: provide accurate, current, and complete information; not misrepresent your identity or age; not create multiple accounts for the same individual; and not create an account if you are under 18 years of age.

3.3 Account Security

You are responsible for maintaining a strong, unique password and the confidentiality of your login credentials. You must not share your credentials with others. If you suspect unauthorized access to your account, notify us immediately at service@bxar.io.

3.4 Parent Responsibility

Parents and guardians are responsible for: supervising their child's use of the Platform; ensuring the appropriate age tier is selected for their child; periodically reviewing their child's progress and activity; and determining whether Platform content is suitable for their individual child.

3.5 Account Termination by User

You may delete your account at any time from the Platform dashboard, or by contacting us at service@bxar.io. Parents may delete child profiles directly from the parent dashboard.

3.6 Account Suspension or Termination by BXAR

We may suspend or terminate any account at our discretion for: violations of these Terms; providing false or misleading information during registration; engaging in harmful or abusive activity; attempting to circumvent security measures; or any unlawful use of the Platform. We will provide notice where practicable.

4. Acceptable Use

4.1 Permitted Uses

You may use the Platform for: personal educational use by individuals and families; classroom education under the supervision of an authorized educator; family learning activities; and any other lawful educational purpose consistent with these Terms.

4.2 Prohibited Uses

You may not use the Platform to:

  • Attempt unauthorized access to any system, network, or account
  • Exploit or probe vulnerabilities in the Platform or any third-party system (use our responsible disclosure process instead — see Section 4.3)
  • Use automated bots, scrapers, or crawlers to access the Platform
  • Disrupt or interfere with the Platform or its underlying infrastructure
  • Introduce malicious code, viruses, or harmful software
  • Harass, threaten, or harm any other person
  • Upload, transmit, or distribute illegal or harmful content
  • Use the Platform for any commercial purpose without our express written permission
  • Reverse engineer, decompile, or disassemble any part of the Platform
  • Redistribute or sublicense content beyond the license granted in Section 5.2
  • Remove, obscure, or alter any copyright, trademark, or proprietary notices
  • Assist or encourage any third party to do any of the above

4.3 Responsible Vulnerability Disclosure

If you discover a security vulnerability in the Platform, we encourage responsible disclosure. Please report vulnerabilities to service@bxar.io. When reporting, please: do not access, modify, or exfiltrate others' data; do not disrupt Platform services or degrade user experience; allow us 90 days to investigate and remediate before any public disclosure. We will acknowledge receipt of your report within 5 business days. We will not pursue legal action against individuals who report vulnerabilities in good faith in accordance with this policy.

5. Intellectual Property

5.1 BXAR Ownership

All content on the Platform — including but not limited to text, graphics, illustrations, the Cypher character, videos, interactive modules, curricula, code, and design — is owned by BXAR Inc. or its licensors and is protected by applicable copyright, trademark, and intellectual property laws.

5.2 Limited License

Subject to these Terms, BXAR grants you a limited, non-exclusive, non-transferable, revocable license to: access and use the Platform for personal or classroom education; print workbook materials for educational use provided all branding and copyright notices are retained; and share URLs linking to Platform content.

5.3 Restrictions

You may not:

  • Redistribute, resell, or sublicense any Platform content for commercial purposes
  • Use Platform content to create competing educational products or services
  • Use the Cypher character, BXAR branding, or CyberScale name without our express written permission
  • Remove or alter any copyright, trademark, or other proprietary notices

5.4 Trademarks

"CyberScale," "BXAR," and "Cypher" are trademarks of BXAR Inc. All rights reserved. Unauthorized use is strictly prohibited.

5.5 Feedback

If you provide suggestions, ideas, or feedback regarding the Platform, you grant BXAR a perpetual, irrevocable, worldwide, royalty-free license to use, reproduce, modify, and incorporate such feedback into the Platform or other products without any obligation to you.

6. User-Generated Content

6.1 Scope

User-generated content on the Platform is limited in scope. Account holders may submit: display names and usernames, avatar selections, child profile nicknames, classroom names created by educators, and enrollment codes. The Platform does not include public profiles, public forums, comment sections, file upload features, or social sharing functionality.

6.2 Display Names

Users are responsible for the display names and nicknames they select or assign. Display names that are offensive, inappropriate, or in violation of these Terms may be modified or removed by BXAR without notice.

7. AI-Powered Features

7.1 Nature of AI Features

The Platform may include AI-powered features such as an AI learning mentor or interactive AI exercises. These features are designed for educational purposes only. AI-generated responses may contain inaccuracies or errors. Nothing generated by AI on the Platform constitutes professional advice of any kind. BXAR is not liable for any decisions made or actions taken in reliance on AI-generated content.

7.2 Safety Guardrails

AI features on the Platform are configured with safety guardrails designed to keep interactions within the scope of cybersecurity education appropriate for children and teenagers. However, no AI system is infallible. If you encounter AI output that seems inappropriate or harmful, please report it to service@bxar.io.

7.3 User Responsibility

Users should apply critical thinking when engaging with AI-generated content. Parents and guardians are responsible for evaluating the suitability of AI-generated content that their children interact with on the Platform.

8. Disclaimer of Warranties

8.1 "As Is" and "As Available"

The platform is provided "as is" and "as available" without warranties of any kind, either express or implied. To the fullest extent permitted by applicable law, BXAR Inc. and its officers, directors, employees, agents, licensors, and service providers ("BXAR Parties") disclaim all warranties, express or implied.

8.2 Specific Disclaimers

Without limiting the foregoing, the BXAR Parties specifically disclaim all warranties of: merchantability; fitness for a particular purpose; uninterrupted or error-free access to the platform; accuracy, completeness, or reliability of any content; that the platform will meet your requirements or expectations; that the platform will prevent or protect against any cyberattack, data breach, or security incident; and that AI-powered features will produce accurate, complete, or appropriate results.

8.3 Educational Content Disclaimer

Cybersecurity is a rapidly evolving field. Content on the Platform reflects best practices and recommendations at the time of creation. Such content may become outdated as threats, technologies, and industry standards evolve continuously. BXAR makes no warranty that any specific content reflects the current state of cybersecurity knowledge.

8.4 Jurisdictional Limitations

Some jurisdictions do not allow the exclusion of certain warranties. In such jurisdictions, including under Quebec and Canadian consumer protection law, some of the above exclusions may not apply to you. In those cases, such warranties are limited to the minimum extent permitted by applicable law.

9. Limitation of Liability

9.1 Exclusion of Certain Damages

To the fullest extent permitted by applicable law, the BXAR Parties shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to: loss of profits or revenue; loss of data or content; cost of procuring substitute services; damages arising from any cyberattack, data breach, or security incident that occurs despite use of the platform; damages arising from reliance on inaccurate or outdated educational content; damages arising from AI-generated content; or damages arising from unauthorized access to your account or child profile.

9.2 Aggregate Cap

To the fullest extent permitted by applicable law, the total aggregate liability of the BXAR Parties for all claims arising out of or relating to these Terms or your use of the Platform shall not exceed the greater of: CAD $100.00, or the total amount you paid to BXAR in the twelve (12) months preceding the event giving rise to the claim (which, for free accounts, will be zero).

9.3 Basis of the Bargain

The limitations of liability in this Section 9 reflect a reasonable allocation of risk and are an essential element of the basis of the agreement between you and BXAR. The Platform would not be provided to you without these limitations.

9.4 Jurisdictional Limitations

Some jurisdictions, including Quebec under the Consumer Protection Act, do not allow the exclusion or limitation of certain types of damages. In such jurisdictions, the limitations above may not apply to you to the extent required by applicable law.

10. Indemnification

You agree to defend, indemnify, and hold harmless the BXAR Parties from and against any claims, damages, losses, liabilities, costs, and expenses (including reasonable legal fees) arising out of or relating to: your violation of these Terms; your misuse of the Platform; your violation of any applicable law or regulation; your infringement of any third-party rights, including intellectual property rights; any content you submit to the Platform; or any misrepresentation made by you, including misrepresentation of age or identity.

11. Dispute Resolution

11.1 Governing Law

These Terms and any disputes arising out of or related to these Terms or your use of the Platform shall be governed by and construed in accordance with the laws of the Province of Quebec and the federal laws of Canada applicable therein, without regard to conflict of law principles.

11.2 Jurisdiction

You consent to the exclusive jurisdiction of the courts located in Montreal, Quebec, Canada for the resolution of any disputes arising out of or related to these Terms or your use of the Platform.

11.3 Informal Resolution

Before initiating any formal legal proceeding, you agree to contact BXAR at service@bxar.io to attempt to resolve the dispute informally. You and BXAR will make good-faith efforts to resolve the matter within 30 days of notice. If the dispute is not resolved within that period, either party may pursue formal legal remedies.

11.4 Class Action Waiver

To the maximum extent permitted by applicable law, you waive any right to participate in a class action lawsuit or class-wide arbitration against the BXAR Parties. All claims must be brought in your individual capacity and not as a plaintiff or class member in any purported class or representative proceeding.

12. General Provisions

Entire Agreement: These Terms, together with the Privacy Policy and How We Protect Kids page, constitute the entire agreement between you and BXAR regarding your use of the Platform and supersede all prior agreements, representations, or understandings.

Severability: If any provision of these Terms is found to be unenforceable or invalid, that provision will be limited or eliminated to the minimum extent necessary so that the remaining Terms remain in full force and effect.

No Waiver:BXAR's failure to enforce any right or provision of these Terms shall not be deemed a waiver of that right or provision.

Assignment:You may not assign or transfer your rights or obligations under these Terms without BXAR's prior written consent. BXAR may freely assign these Terms without restriction.

Force Majeure: BXAR shall not be liable for any failure or delay in performance resulting from causes beyond its reasonable control, including natural disasters, acts of government, internet outages, or other force majeure events.

Notices: We may provide notices to you via email to the address associated with your account or by posting on the Platform. You may send notices to us at service@bxar.io.

Language: These Terms were drafted in English. In the event of any conflict between the English version and any translation, the English version prevails.

13. Changes to These Terms

We reserve the right to modify these Terms at any time. For material changes, we will provide at least 30 days' advance notice by email to the address associated with your account and by updating the "Last Updated" date at the top of this page. Minor or non-material changes may take effect immediately upon posting. Your continued use of the Platform after any changes take effect constitutes your acceptance of the revised Terms. If you do not agree to the revised Terms, you must stop using the Platform and may request account deletion at service@bxar.io.

14. Contact Us

If you have any questions, concerns, or requests regarding these Terms, please contact us:

BXAR Inc.
Montreal, QC, Canada
service@bxar.io

These Terms of Service are governed by the laws of Quebec, Canada.