Privacy Policy

TOMS ("Top of Mind Security") is a security awareness content service operated by Ten Talents Holdings LLC, d/b/a dontgetgot Security ("we," "us," "our"). This policy explains what information we collect, how we use it, and the choices you have.

We are a content company. We send stories. We collect as little information as we need to do that and bill for it.

Information we collect.

Information you give us directly:

  • Name and email address

  • Company name and approximate company size

  • Billing information (processed by our payment provider — see below)

  • Any information you include when you contact us

Information collected automatically:

  • Email engagement data (whether messages were delivered, opened, or clicked)

  • Basic website analytics (pages visited, referring source, general location, device type)

  • Cookies and similar technologies used for site functionality and advertising measurement

What we do not collect:

  • We do not collect or store your employees' personal information beyond the email addresses required to deliver content

  • We do not require your team to create accounts, complete assessments, or submit personal data to us

  • We do not sell personal information

How we use information

We use the information we collect to:

  • Deliver the content you subscribed to

  • Process payments and manage your subscription

  • Respond to your inquiries and provide support

  • Understand which content resonates, so we can make it better

  • Send occasional service updates about your subscription

  • Measure the effectiveness of our advertising

‍ ‍Payment processing

Payments are processed by Stripe, Inc. We do not receive or store your full payment card details. Stripe's handling of your information is governed by their own privacy policy at stripe.com/privacy.

Service providers

We share information with a limited number of providers who help us operate:

ProviderPurposeStripePayment processing and subscription billingMemberfulSubscription management, membership accounts, and content deliverySquarespaceWebsite hosting and form submissionsGoogle AnalyticsWebsite analyticsMeta / LinkedInAdvertising delivery and measurement

Each processes information on our behalf and is bound by its own terms and privacy commitments.

Subscriber lists and your team

If you purchase a subscription for your organization, your designated administrator manages who receives the content. We provide the tools; your administrator controls the list.

We do not require you to send us your employee roster, and we recommend you don't. Your team members subscribe themselves through a link you control.

Individual recipients may unsubscribe at any time using the link in every message.

Cookies‍

Our website uses cookies for basic functionality, analytics, and advertising measurement. You can control cookies through your browser settings. Disabling them may affect site functionality

Data retention ‍

We keep subscriber information for as long as your subscription is active and for a reasonable period afterward for accounting, tax, and legal purposes. You may request deletion at any time (see below).

Your rights

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you

  • Correct inaccurate information

  • Request deletion of your information

  • Opt out of marketing communications

  • Object to or restrict certain processing

  • Request a portable copy of your information

California residents (CCPA/CPRA): You have the right to know what personal information we collect, to request deletion, and to opt out of the sale or sharing of personal information. We do not sell personal information.

EU/UK residents (GDPR): Our lawful bases for processing are contract performance (delivering the service you purchased), legitimate interests (improving our content and operating our business), and consent (marketing communications where required).

To exercise any of these rights, email toms@dontgetgot.co. We will respond within the timeframe required by applicable law.

Security

We take reasonable measures to protect the information we hold. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children

Our service is intended for businesses and is not directed at anyone under 16. We do not knowingly collect information from children.

International transfers

We are based in the United States. If you access our service from outside the U.S., your information will be transferred to and processed in the United States.

Changes to this policy

We may update this policy. Material changes will be communicated to active subscribers by email. The "last updated" date above reflects the most recent revision.

Contact

Ten Talents Holdings LLC d/b/a dontgetgot Security 7901 4th St N, Ste 300 St. Petersburg, FL 33702 toms@dontgetgot.co

‍ ‍


TERMS OF SERVICE

Last updated: August 3, 2026

These Terms govern your use of TOMS ("Top of Mind Security"), a content subscription service operated by Ten Talents Holdings LLC, d/b/a dontgetgot Security ("we," "us," "our"). By subscribing or using our website, you agree to these Terms.

1. What the service is

TOMS delivers security awareness content — narrative stories about real security incidents — by email on a recurring basis. Content is based on publicly reported events including court documents, indictments, regulatory filings, and journalism.

Certain moments in our stories may be dramatized for narrative effect, and conversations that were never made public may be reconstructed. Where we do this, we say so.‍ ‍

2. What the service is not

This is important. Please read it.

TOMS is educational content. It is not:

  • A security assessment, audit, or penetration test

  • A managed security service or monitoring product

  • Compliance certification for any standard, regulation, or framework

  • Legal, financial, or professional security advice

  • A guarantee against any security incident

We make no representation that use of our content will prevent, detect, or mitigate any security incident. Security outcomes depend on many factors outside our control, including your systems, policies, personnel, and vendors.

You remain solely responsible for your organization's security program, including any regulatory or contractual obligations you may have.

3. Subscriptions and billing

Term. Subscriptions are sold on an annual basis and billed in advance.

Pricing. Pricing is tiered by organization size as displayed at the time of purchase. You are responsible for selecting the tier that accurately reflects your organization's size.‍ ‍

Renewal. Subscriptions renew automatically at the then-current rate for your tier unless cancelled before the renewal date. We will provide advance notice of renewal.

Price changes. We may change pricing. Changes take effect at your next renewal, and we will notify you before they apply.

Taxes. Prices exclude applicable sales tax, VAT, or similar taxes, which will be added where required.

4. Seats and access

Seat count. Your subscription includes access for the number of people covered by your tier.

Administration. Your designated administrator is responsible for managing who has access, adding and removing recipients, and ensuring seat usage stays within your tier.

Accuracy. If your organization grows beyond your tier, you agree to upgrade. We may audit usage and adjust billing accordingly.

Sharing. Access is for your organization's personnel only.

5. Acceptable use ‍

You may:

  • Distribute our content internally to anyone in your organization covered by your subscription

  • Forward, print, post internally, or discuss content within your organization

  • Reference our content in internal training materials with attribution

You may not:

  • Resell, sublicense, or redistribute our content outside your organization

  • Republish content publicly or on any external platform

  • Use our content to build a competing product or service

  • Remove attribution or branding from our content

  • Use automated means to scrape or bulk-extract our content

6. Intellectual property‍ ‍

All content is owned by us or our licensors and protected by copyright. Your subscription grants a limited, non-exclusive, non-transferable license to access and internally distribute content for the term of your subscription. This license ends when your subscription ends.‍ ‍

Our name, logos, and branding are our trademarks and may not be used without permission.

7. Cancellation and refunds

Cancellation. You may cancel at any time. Cancellation takes effect at the end of your current billing period. Access continues until then.

Refunds. Annual subscriptions are non-refundable except as required by law or at our sole discretion. If you're unhappy, contact us — we'd rather hear about it than not.

Termination by us. We may suspend or terminate your subscription for breach of these Terms, non-payment, or if we discontinue the service. If we discontinue the service, we will refund the unused portion of your subscription.

8. Accuracy of content ‍

We make reasonable efforts to ensure our content is accurate and sourced from credible reporting. Facts may change as investigations and legal proceedings develop. We do not warrant that all content is complete, current, or error-free.

If you believe we've published something inaccurate, email us and we'll review it.‍ ‍

9. Disclaimers

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, TIMELY, OR ERROR-FREE.

10. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, OUR TOTAL LIABILITY ARISING FROM OR RELATING TO THE SERVICE SHALL NOT EXCEED THE AMOUNT YOU PAID US IN THE TWELVE MONTHS PRECEDING THE CLAIM.

WE SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING LOST PROFITS, LOST DATA, BUSINESS INTERRUPTION, OR SECURITY INCIDENTS, EVEN IF ADVISED OF THE POSSIBILITY.

Some jurisdictions do not allow certain limitations, so some of the above may not apply to you.

11. Indemnification

You agree to indemnify and hold us harmless from claims arising out of your misuse of the service, your violation of these Terms, or your violation of any law or third-party right.

12. Changes to these Terms

We may update these Terms. Material changes will be communicated to active subscribers by email at least 30 days before taking effect. Continued use after changes take effect constitutes acceptance.

13. Governing law and disputes ‍

These Terms are governed by the laws of the State of Florida, without regard to conflict of law principles. Any dispute shall be brought exclusively in the state or federal courts located in Florida, and you consent to their jurisdiction.

14. Miscellaneous

Entire agreement. These Terms and the Privacy Policy constitute the entire agreement between us.

Severability. If any provision is found unenforceable, the remaining provisions stay in effect.

No waiver. Our failure to enforce any provision is not a waiver of it.

Assignment. You may not assign these Terms without our consent. We may assign them in connection with a merger, acquisition, or sale of assets.

15. Contact ‍

Questions about these Terms:

Ten Talents Holdings LLC d/b/a dontgetgot Security 7901 4th St N, Ste 300 St. Petersburg, FL 33702 toms@dontgetgot.co