Terms of Service

1. The service

These Terms of Service form an agreement between you and Turnip Games, LLC (“Turnip Games,” “we,” “us,” or “our”) concerning your access to and use of Crisis Tabletop (the “Service”). By accessing or using the Service, you agree to these terms. If you use the Service for an organization, you represent that you have authority to accept these terms for that organization, and “you” includes the organization.

The Service helps users prepare, customize, facilitate, display, and document discussion-based tabletop exercises. Exercise results depend on the facts supplied, the participants selected, and the professional judgment of the facilitator and participants.

2. Accounts and participants

Facilitators may authenticate through Google or OpenAI and are responsible for activity in their workspaces. Keep access links, room codes, devices, and account credentials secure. Notify us if you reasonably believe access has been compromised.

Guest facilitator mode does not create an account. It provides a read-only library and stores local session progress only in the browser being used. Guest sessions cannot be customized or shared with participants and may be lost when browser storage is cleared.

Signed-in facilitators control whom they invite, which roles participants may claim, and what exercise information is shown or sent. A participant may join through a room code without creating a facilitator account. Facilitators are responsible for giving participants any notices and obtaining any permissions required by their organization or applicable law.

The Service is intended for professional and organizational use. It is not directed to children under 13. A person under the age of majority may use the Service only through an organization and with authorization from a parent, guardian, school, or other legally authorized adult when required.

3. Exercise content and customer data

You may create, import, upload, display, and share scenarios, organization names, logos, participant names, roles, messages, responses, facilitator notes, and other content (“Customer Content”). You retain ownership of Customer Content. You grant us a limited license to host, process, reproduce, and transmit Customer Content only as reasonably necessary to operate, secure, maintain, and support the Service.

You are responsible for Customer Content and for confirming that you have the authority to use it. Do not enter real credentials, exploit code, personal data, health information, personnel records, privileged material, trade secrets, or other sensitive information unless your organization has approved that use and implemented appropriate safeguards. Use fictional or minimized facts whenever practical.

Exercise templates are starting points. You are responsible for adapting legal authorities, deadlines, contracts, escalation paths, contacts, technical assumptions, and response decisions to your organization and jurisdictions.

4. Acceptable use

You may not use the Service to:

• violate law, contract, intellectual-property rights, privacy rights, or another person’s rights;
• attack, probe, disrupt, or gain unauthorized access to systems, accounts, networks, or data;
• upload malicious code, live credentials, unlawful content, or material you are not authorized to process;
• harass, threaten, deceive, impersonate, or unlawfully monitor another person;
• bypass access controls, interfere with service operation, or test the Service for vulnerabilities without written authorization;
• resell or make the Service available as a competing hosted product unless we agree in writing; or
• use exercise content as instructions for harmful real-world activity.

Good-faith tabletop exercises may discuss attacks and vulnerabilities. Those discussions must remain within the organization’s authorized, controlled exercise scope.

5. Confidentiality and privilege

The Service does not create an attorney-client relationship, establish legal privilege, or determine whether information is confidential, protected, or discoverable. Labels such as “private,” “legal,” or “confidential” describe exercise routing only.

Organizations should decide before an exercise what information may be entered, who may participate, how records will be handled, and whether counsel should direct any portion of the exercise. Room codes and participant links should be treated as access credentials and shared only with intended participants.

6. Intellectual property

The Service, its software, visual design, Crisis Tabletop branding, and original exercise templates are owned by Turnip Games or its licensors and are protected by intellectual-property laws. Subject to these terms, we grant you a limited, revocable, nonexclusive, nontransferable right to use the Service for internal professional purposes.

You may export and adapt original Crisis Tabletop exercise documents for your organization’s internal exercises. You may not remove attribution from distributed templates, represent our templates as your original commercial product, or use our trademarks without permission. If you provide feedback, you permit us to use it without restriction or compensation.

7. Third-party material and links

The Service may include adaptations, references, logos, links, or factual material from government agencies, law firms, security organizations, standards bodies, and other third parties. Their material remains subject to its applicable terms. Links and references do not imply sponsorship or endorsement.

CISA-based exercises identify CISA as their source. Crisis Tabletop is not affiliated with or endorsed by CISA, the Department of Homeland Security, or other referenced organizations. You are responsible for reviewing any third-party license or usage restrictions that apply to material you import or redistribute.

8. Availability and changes

We may add, change, suspend, or discontinue features. The Service may be unavailable because of maintenance, security events, provider outages, or circumstances outside our control. You should export material needed for business continuity and maintain separate copies of incident plans and emergency contacts.

We may update these terms. The effective date will identify the current version. Continued use after an update takes effect constitutes acceptance of the revised terms to the extent permitted by law.

9. Disclaimers

THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE.” TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, ACCURACY, SECURITY, AND UNINTERRUPTED AVAILABILITY.

Exercise templates and external references are educational. They are not legal, cybersecurity, privacy, employment, sanctions, regulatory, insurance, accounting, medical, or other professional advice. They do not establish that an organization is compliant, prepared, secure, or capable of performing the actions discussed.

10. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, TURNIP GAMES AND ITS AFFILIATES, OWNERS, PERSONNEL, LICENSORS, AND SERVICE PROVIDERS WILL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, REVENUE, DATA, GOODWILL, BUSINESS OPPORTUNITY, OR BUSINESS INTERRUPTION, ARISING FROM OR RELATING TO THE SERVICE.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, OUR AGGREGATE LIABILITY ARISING FROM OR RELATING TO THE SERVICE WILL NOT EXCEED THE GREATER OF ONE HUNDRED U.S. DOLLARS OR THE AMOUNT YOU PAID US FOR THE SERVICE DURING THE TWELVE MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM. These limitations do not apply where applicable law prohibits them.

11. Indemnity

To the extent permitted by law, you will defend, indemnify, and hold harmless Turnip Games and its affiliates, owners, personnel, and service providers from third-party claims, damages, losses, and reasonable expenses arising from Customer Content, your exercise activities, your violation of these terms, or your infringement of another person’s rights. This obligation does not apply to the extent a claim results from our willful misconduct.

12. Suspension and termination

You may stop using the Service at any time. We may suspend or terminate access when reasonably necessary to protect the Service or others, respond to legal requirements, address nonpayment, or enforce these terms. Provisions that by their nature should survive termination will survive, including ownership, disclaimers, liability limitations, indemnity, and governing-law provisions.

13. Governing law and disputes

These terms are governed by Wisconsin law, without regard to conflict-of-law rules. Unless applicable law requires otherwise, the state and federal courts located in Dane County, Wisconsin will have exclusive jurisdiction over disputes arising from these terms or the Service. Before filing a claim, each party will make a reasonable effort to resolve the dispute informally.

If any provision is unenforceable, it will be modified only to the extent necessary and the remaining provisions will remain effective. Failure to enforce a provision is not a waiver. These terms and any additional written terms we expressly accept constitute the entire agreement regarding the Service.

14. Contact

Questions about these terms may be sent to legal@tourn.app.