Legal

Digital Bodyguard Membership Agreement

This is the agreement every Digital Bodyguard member accepts when they join, in force from November 2026 (v2.1-2026-11). Members accept it on the join page, together with the Endpoint Protection Software Addendum and the Digital Bodyguard Privacy Notice; this page is the published copy.

1. Who this is between

This Agreement is between Ocala Cyber LLC, a Florida limited liability company in Marion County, Florida ("Ocala Cyber", "we", "us"), and the person named on the membership form ("you", "the member"). You must be 18 or older to join. Section 17 says how we send notices to each other.

Your household. Membership is personal to you and the household address you give us. It covers you and the people who live with you at that address (your household). It is not transferable to another household or to a business.

We can work on a household member's device or account when that person is present or has told us in writing that it is fine. You confirm that you have the right to let us work on anything you ask us to touch. Section 5 says which devices our software may go on.

2. What Digital Bodyguard is

Digital Bodyguard is a cybersecurity and technical support membership for your home: the same kind of managed protection and support that a business gets from its IT provider, sized for a household. We install business-grade protection on your computers, phones and tablets, manage them remotely, keep them updated, watch for trouble, and give you a local cyber analyst to call when something looks wrong or you need help with your technology.

We work on your own devices and accounts, with you present or with your written authorization.

Three levels. Sections 1 to 20 describe the Base membership. Section 21 describes what is different for Premium, and Section 22 what is different for Elite.

What goes on your devices. On your computers, your membership includes a remote management agent and endpoint detection and response (EDR) software (protection designed to stop threats). On your phones and tablets, it includes a mobile protection app. We install them at your set-up visit (Section 4). Section 5 describes each, and the terms that come with them.

3. On-demand support

You may contact us whenever you need help with your security or your technology: something that looks suspicious, a question about a message, a call or a website, a device that is misbehaving, a setting you need changed, or an account you need help with. We tell you what it is and what to do, and we do the work with you where we can.

Send anything suspicious to phishing@ocalacyber.com. For everything else, email contact@ocalacyber.com, or call or text the number on our website.

We review what you choose to send us. We do not go into your mailbox, accounts or devices unless you accept a remote session on screen or give us your written authorization.

The time we spend helping you, whether that is reading what you sent, answering it, or working on your device with you, counts toward the monthly response time in Section 6.

4. Set-up visit

Membership starts with one in-person visit. We come to you, install the software described in Section 5 on your registered devices, and show you how it works and what to do the day something looks wrong. If you would rather we did not install something, Section 8 applies.

That visit is the only in-person part of a Base or Premium membership. Everything after it is handled remotely (Section 6). An Elite membership adds one visit a year (Section 22.4). The set-up visit is within Marion County; farther afield by agreement.

Security reviews, account clean-ups and hands-on set-up of your devices and accounts beyond the set-up visit are not part of membership. We are glad to do them, as hourly work at the member rate in Section 6.

5. What we put on your devices

Three pieces of software go on your devices as part of your membership: a remote management agent (5.1) and EDR software (5.2) on each registered computer, and a mobile protection app (5.11) on each registered phone or tablet. All three are included in your membership; Section 11 says how many devices your price covers. There is nothing in this section to buy on top of your membership.

Computers and mobile devices are covered differently. Subsections 5.1 to 5.10 are about Windows and Mac desktops and laptops. Subsection 5.11 is about iPhones, iPads and Android phones and tablets. On an Elite membership, the backup of your computers comes from Section 22.3 and the round-the-clock watch from Section 22.2, not from this section.

5.1 Remote management agent (included)

We install a remote management agent on your Windows or Mac desktops and laptops as part of setting up your membership. It is the tool we manage your computers with. Where a computer is enrolled, we can see and act on:

Remote sessions require your consent each time. We will not connect to an enrolled computer's screen without you accepting the session on screen.

Updates and routine maintenance run in the background without a remote session, and a computer may need to restart; we schedule restarts outside your usual hours where we can. Updates come from the software's manufacturer and, now and then, one causes a program to misbehave. We will help put that right, and we are not responsible for a manufacturer's faulty update.

5.2 Endpoint detection and response we install and watch (included)

We install business-grade EDR software on an enrolled computer, in place of the free consumer software that came with it.

The difference is not only the software. Consumer anti-virus sits on the computer and tells you when it finds something, in a notification you may not see or may not know how to read. The product we install reports to us as well, so a detection reaches a person who can look at what happened and act on it. It is also kept up to date and configured by us rather than left at its default settings.

When it detects something, we tell you what happened and what we did in our own words; we never copy the detection records out of the manufacturer's console (5.7).

We select the product and we may change which product we use. We will tell you before we do, and if the replacement would collect materially more from your computer, store it in a different country, keep it materially longer, give us remote control the current product does not, or come with different limits on the manufacturer's responsibility, we will ask you to accept the changed terms again before it goes on your computer. The terms that come with it are in 5.5 to 5.10 and in the Endpoint Protection Software Addendum you accept before it is installed (5.5).

5.3 Computers we cannot fully protect

A computer whose operating system the manufacturer no longer updates cannot be kept fully secure by anyone. We will tell you if one of yours is in that position. We may decline to enroll it, and we are not responsible for problems that come from keeping it in use.

5.4 Your files and backups

We are not your backup. Please keep your own copies of anything you cannot afford to lose (photos, documents, passwords) somewhere separate from the computer, and check them from time to time. We will gladly help you set a backup up (additional charge), but we do not hold your files, and we cannot promise to recover files from a failed drive or a wiped computer.

Elite changes this. On an Elite membership we also back up the documents and photographs on your registered computers, as Section 22.3 describes. That backup is one more copy, not your only one, so the advice above still applies.

5.5 The protection software: what you are authorizing

This subsection and the five that follow are the terms that come with the EDR software in 5.2. In them we call that software the protection software, and the company that makes it the manufacturer.

What you are letting us do. You authorize us to install the protection software on each computer you have registered with us, and to set it up, keep it current, look after it, and take it off again. You also authorize us to run the manufacturer's console for your registered computers on your behalf. That authorization lasts while your membership includes the software.

Which devices. The protection software goes on the computers you have registered with us, and on no others. A registered computer is a Windows or Mac desktop or laptop (Section 11). It is for a computer you own, or that you otherwise control as your own, in your household.

Adding and removing a device. Tell us in writing (email is fine) and we will add a device to your membership or take one off it. When a device comes off, 5.9 applies to it.

Before it goes on. The manufacturer requires your written agreement to these terms before its software is installed for you. Joining by itself does not give us that agreement. Before the protection software goes on any of your computers, you sign, or accept electronically, a short separate document, the Endpoint Protection Software Addendum, and we record your acceptance; we do not install the software on a computer until that is done. The Addendum says the same things as 5.5 to 5.10 in more detail, and Section 20 says how it ranks.

What you get from the manufacturer. The software is licensed to you, not sold to you, and it stays the manufacturer's property. For as long as your membership includes it, you may have it installed and running on your registered computers, as part of what we do for you. That permission is yours alone: you cannot transfer it, sell it, rent it, lend it, or pass it to anyone else, and you get no other rights to the software beyond the one described here. You are not a party to the manufacturer's own terms of service, and joining does not ask you to accept them: the manufacturer's terms that apply to you are the ones in 5.5 to 5.10.

5.6 The manufacturer's rules you agree to

These are the manufacturer's rules, not ours, and they are a condition of the software being installed for you. You will not do any of the following, and you will not let anyone else do them either. You will not:

(a) change the software or its instructions, alter it, translate it, adapt it, build anything out of it, or reveal it or its instructions to anyone else;

(b) sell it, rent it, lease it, lend it, give it away, license or sublicense it to anyone, pass it on, transfer or assign it, or hand it or its instructions to anyone else;

(c) take it apart, decompile it, or reverse engineer it, except where the law expressly allows it despite this rule;

(d) use it in any unlawful way, in breach of any law or regulation, or in a way that tramples another person's property, privacy or personal rights, including to keep or send material that is unlawful, infringing, defamatory or otherwise wrongful;

(e) use it to keep or send viruses, malicious code, or anything written to break into, disable, erase or damage software, hardware or data, or to do anything else harmful;

(f) copy any part of it, or frame or mirror any part of it or what it shows;

(g) get access to it or use it to build something that competes with it, or copy the way it works or what it does;

(h) interfere with how it works or how well it works;

(i) try to get access you are not entitled to, whether to the software, to the systems behind it, or to somebody else's account;

(j) tell anyone else, or publish anywhere, how well or badly it performs, or any analysis of its performance, without the manufacturer's permission;

(k) remove, change or hide any ownership or copyright notice on it or in its instructions; or

(l) probe it, scan it or test it for weaknesses, tamper with it or do anything else meant to get around it or defeat its protection, try to get past its security or its sign-in, or do anything that puts an unreasonable or disproportionately large load on the systems behind it.

Please tell us promptly if you become aware that any of this has happened. Item (l) is about tampering, not about changing your mind: asking us to take the software off a device is always your right, and 5.9 is how you do it.

The software is not ours, and neither of us will say that it is. Neither you nor we may present it as Ocala Cyber's own product, rename it, put our name on it, or say anything untrue or misleading about it or about our relationship with the manufacturer.

Do not use it for someone else without their say-so. You will not use the software, or get access to it, for another person unless that person has properly agreed to it. 5.8 is where you confirm you have the right to register each device.

Where the full wording lives. This lettered list is the household version of one list, written once and used in two places: the Endpoint Protection Software Addendum and this subsection. They are kept the same on purpose, and Section 20 says which one governs if they ever differ.

5.7 Where the detections live, and why we keep no copy

The detections stay with the manufacturer. What the protection software sees on your computer goes to the manufacturer's own console: the record of activity it uses to spot a threat (which programs ran and what they did, the files they touched, the web addresses and network connections the computer contacted, sign-ins, and the commands and scripts that ran), the details of anything it finds, and, for a file it flags as suspicious or malicious, a copy of that file. We watch that console on your behalf.

We keep no copy of it. We do not copy that information out of the manufacturer's console. It is not exported, screenshotted, pasted, emailed, or stored in our reports, spreadsheets, files, client portal, ticketing system, AI tools or anything else of ours. We look at it where it lives and we act on it there.

So there are things we cannot do with it. Because we hold no copy, we cannot export that information, delete it, or control it independently of the manufacturer. If you ask us about it, or ask us to produce it or remove it, what is possible depends on what the manufacturer's platform allows and on the manufacturer's own terms. We will tell you what can be done and help you ask, and we will not promise you an outcome that is not ours to give.

This is how we work today. That is our current practice, not a permanent guarantee. If it changes we will update these terms and tell you before the change applies to you (Section 18). Everything else about how your information is handled is in Section 16 and the Digital Bodyguard Privacy Notice.

5.8 Your side: who owns the device, and who else uses it

When you register a device for the protection software, you are confirming to us that:

Other people who use the device. A family computer usually has more than one person on it. If anyone else regularly uses a device you register, please tell them the protection software is on it and that it reports to us. You are confirming that you have done so and that they do not object. The software records activity on the device, including the websites it visits, and we look at that record only to deal with threats; they are entitled to know the software is there and what it records.

If something changes. Tell us if any of this stops being true, and we will sort it out with you. We may take the software off a device that no longer qualifies.

Using it yourself. Keep the software switched on and let it do its work. If you turn it off, uninstall it, or block it from updating, tell us, because we will not be able to see the device properly and Section 8 applies.

5.9 Pausing it, taking it off, and when your membership ends

You can say no at any time. You may ask us to remove the remote management agent, the protection software or both from a device, or from all of them, whenever you like. Just tell us. You do not have to cancel your membership to do it, but we will not be able to deliver the part of your membership that depends on the software, and Section 8 applies to what that protection would have prevented.

We may suspend or remove it. We may switch off or remove the software on a device if the rules in 5.6 are broken on it, if the device turns out not to qualify under 5.8, if the manufacturer stops supplying it to us, or if your membership is suspended or ends.

What happens when it comes off. Your permission to use the software on that device ends, you stop using it, and you let us disable or remove it, remotely where we can and otherwise by walking you through it. If we cannot reach a device, you agree to take the software off it yourself with our help. Any access you had to the manufacturer's console ends too.

When your membership ends. We remove the protection software from your devices, as Section 10 says, and your permission to use it ends with the membership.

Information the manufacturer still holds. Anything about your device sitting in the manufacturer's platform is subject to the manufacturer's own windows for retrieving and deleting it, not ours. We do not control those windows, we keep no copy of that information, and we do not promise that anything can be retrieved from it. We have no commitment from the manufacturer about how long it stays available after your membership ends, and we are not giving you one. If you want something out of it, ask us before your membership ends and we will tell you what is possible at the time.

Your own license instead. If the manufacturer sells licenses directly to individuals, you are free to buy one and keep using the software that way. That would be your agreement with them, not with us.

5.10 No guarantee, and the manufacturer's limits

Protection is not a guarantee. The protection software reduces risk. It does not guarantee that something malicious will be stopped, found or removed, and neither do we. Monitoring is not a guarantee that a problem will be caught, either. On a Base or Premium membership nobody is watching your computers or the console around the clock: the software runs all the time, we do not (an Elite membership adds a staffed watch, Section 22.2). Section 7 says what to expect, and it sets no response time.

The manufacturer gives no guarantee, and its own responsibility to you is limited. You accept that as a condition of getting the software, and the manufacturer can rely on this paragraph and on 5.6 directly:

Nothing here takes away a right you have under Florida law that cannot be signed away, including under consumer-protection law.

5.11 The mobile protection app on your phones and tablets

On each phone or tablet you register with us (an iPhone, an iPad, or an Android phone or tablet), we install a business-grade mobile protection app. It is designed to detect threats that reach a phone or tablet, such as a dangerous link in a text message, an email or a web page, or a harmful app, and it reports what it finds to us as well as to you. Mobile protection reduces risk. It does not guarantee that nothing gets through.

What it is not. The app gives us no control of the device. We cannot see your phone's screen, read your messages, photos, contacts or personal apps, find where the phone is, lock it or erase it. If you want help with a phone, we talk you through it by phone or text.

What it sends. To do its job, the app sends its manufacturer information about the device and its security status, the details of any threat it finds, and the web addresses it checks for danger. The Digital Bodyguard Privacy Notice describes this and says where that information is kept.

Enrolling a phone or tablet is your choice. We enroll one only with your agreement at the time, and only if it belongs to you or a member of your household (Section 1) and the person who uses it has agreed. We do not enroll a device that an employer, a school or anyone else provides or already manages. What 5.8 says about telling other people who use a device applies to a phone or tablet too.

The app belongs to the company that makes it, not to us. It is licensed to you, not sold, and it stays the manufacturer's property. You may use it only on your registered devices, for as long as your membership includes it, as part of what we do for you. You will not transfer it, sublicense it, rent it, lease it, lend it, sell it or pass it on; copy it; change it, translate it or build anything out of it; take it apart, decompile it or reverse engineer it; or try to get around it. You will not use it for another person unless that person has properly agreed.

The manufacturer's own terms, and our role. The manufacturer of the app requires that each person who uses it is bound by its license agreement, published at bitdefender.com/site/view/eula-business-solutions.html, and that you authorize us, as the provider that manages the app for you, to operate it on your behalf. You accept that license agreement, and give that authorization, when you accept the Endpoint Protection Software Addendum (5.5), which covers the mobile protection app as well as the EDR software and says where to find the manufacturer's terms. We do not install the app on a phone or tablet until that acceptance is recorded. If the manufacturer's terms and this Agreement disagree about the app, the manufacturer's terms govern for the app itself, and this Agreement governs for everything we do for you.

No guarantee, and the manufacturer's limits. The manufacturer gives no warranty on the app, is not responsible to you for indirect or consequential losses, and limits its own responsibility to what its license agreement allows; you accept that as a condition of getting the app, and the manufacturer may rely on it directly. If something goes wrong with the app, your claim is with us under this Agreement (Section 15), not with the manufacturer. Nothing here takes away a right you have under Florida law that cannot be signed away.

Removing it. You may remove the app yourself from the device's own settings at any time, without asking us; please tell us so we can update your registered devices. We remove it, or tell you how to, when a device comes off your membership or your membership ends, and 5.9 applies to it as it does to a computer.

6. Response time with your membership

A Base membership does not include response time: all the time we spend working for you is at the member rate below, from the first minute. A Premium or Elite membership includes 30 minutes of response time per household, per calendar month (Sections 21.2 and 22). Response time covers anything you need us for that this membership covers: a question about a suspicious email, text or phone call, a remote session on one of your registered computers, working out what happened after a scam and what to do next, helping you lock down and recover an account of yours, walking you through a setting, or working an incident with you. Unused minutes do not roll over to the next month.

What included response time is, and is not. It is the time we spend, up to the included minutes, working with you on your own accounts and registered devices. Most jobs take longer than the included time: for example a full recovery from a compromised account or computer, with the sweep for hidden forwarding rules, unknown apps and remote-access tools, the second-opinion malware scan and the write-up for your bank. We do that work for members too, at the member rate below once any included minutes are used, and we tell you before that happens. Section 11 lists the things we do not do at all, for anyone, whatever time is left.

Time on a Base membership, and time beyond the included minutes on Premium or Elite, is billed in 15-minute increments at $150 an hour ($37.50 per quarter hour), the member rate, to the card you have on file. We will always tell you before the clock starts on billable time, and we agree it with you first. You will not get a surprise bill. An Elite member may instead prepay time in retainer blocks at a lower rate (Section 22.1).

Support is remote. After your set-up visit (Section 4), we help you by email, text, phone and remote session. On-site visits are not part of a Base or Premium membership. If you would like us to come to you for anything else, that is hourly work at the member rate, agreed with you first; an Elite membership includes one visit a year (Section 22.4).

Scam response guidance and a written action plan are part of the response time this Section describes.

$150 an hour is the member rate. Our standard rate for the same work for people who are not members is $200 an hour, and it is listed on our website. Included response time is subject to the reasonable-use terms in Section 7 and the scope limits in Section 11.

7. Reasonable use and response expectations

The response time included in Section 6 belongs to your household (Section 1) and the devices you have registered with us. It is not for a business, a club, a rental property, or friends and family who live elsewhere; we are glad to help them too, quoted as Section 11 describes.

This Agreement sets no response time, and none should be read into it. We work through submissions in the order they reach us and look first at anything that appears to be an active problem. A Premium or Elite membership puts your household's requests ahead of Base requests in that order (Section 21.3). If a matter is urgent, call us.

8. If you decline a protection

You can say no to anything we recommend: the remote management agent, the EDR software, the mobile protection app, two-step login, an update, or a change to a setting. If you do, we will note that you declined it. Declining does not change your price, and we cannot be responsible for a loss that the declined protection would have prevented or reduced.

9. Price, billing and cancellation

Base membership is $59 per month or $638 per year. The Premium price is in Section 21.1 and the Elite price in Section 22.1.

This is a recurring charge. A monthly membership renews every month and an annual membership renews every year, on the day you joined, until you cancel. A reminder email is sent before each renewal charge; for an annual membership it arrives 30 to 60 days before the renewal date and states the renewal date, the amount that will be charged, and how to cancel.

When a cancellation counts. A cancellation we receive before the next scheduled renewal charge stops that renewal. A cancellation we receive after that charge has been made takes effect at the following renewal, and your membership runs to the end of the period you have paid for, subject to any right the law gives you. We go by the date and time your email, cancel form or call reaches us, in Eastern Time, and we confirm every cancellation in writing.

A payment card on file is required. Membership is charged automatically to the card you give us when you join, on the same day each month or each year, until you cancel. Please keep the card current; if a payment fails, Section 10 applies. Time beyond your included minutes, additional registered devices, and any work you ask for that this membership does not cover are charged to the same card once we have told you and agreed it with you. We do not send invoices for membership.

Your rate is held for one year from the day you join. After that first year we may change it. If we do, we will tell you before the new rate applies to you, so you can decide whether to continue or cancel.

You may cancel at any time, with no cancellation charge, by emailing contact@ocalacyber.com, by using the cancel form at ocalacyber.com/digital-bodyguard/cancel/, or by calling us at the number on our website. Cancellation stops the next renewal, and your membership runs to the end of the period you have paid for. We do not pro-rate the current period. Section 10 says what happens when it ends.

If you joined in person. If you signed up at an event or during a visit rather than online, you may cancel for a full refund by telling us in writing (email is fine) before midnight of the third business day after you signed. We refund within ten business days. This is our own policy, and it is in addition to any cancellation right the law gives you.

10. Ending the membership from our side, and failed payments

We can end your membership with 30 days' notice by email. If we end it for a reason that is not yours, we refund the unused part of any annual fee. We can end it at once if you are abusive to us, ask us to do something unlawful, misrepresent who owns a device or account, or if a payment fails and is not put right within 14 days of our telling you. When a membership ends, for any reason, we remove the remote management agent, the EDR software and the mobile protection app and your access to them, and included benefits stop. On an Elite membership, Section 22.2 says what happens to the round-the-clock watch and Section 22.3 what happens to your backed-up files.

11. What is out of scope

This membership covers the devices you register with us. Your price covers up to two registered devices, in any mix of Windows or Mac desktops and laptops, iPhones, iPads and Android phones and tablets, with our software installed on them. More can be registered at $20 a month for each additional device on a monthly membership, or $216 a year for each additional device on an annual membership, quoted to you first.

Other devices are not covered. Printers, routers and WiFi equipment, smart TVs, game consoles, smart-home devices, cameras and network storage are outside this membership, and so is a phone, tablet or computer you have not registered. We are always glad to look at something suspicious that reaches you, whatever device it arrived on, and that advice comes out of your included response time. Hands-on work on a device that is not registered is billed at the member rate from the first minute, agreed with you before we start.

We do not repair or replace hardware. Digital Bodyguard is a remote protection and support service, not a computer repair shop. A failed hard drive, a dead motherboard, a cracked screen, a worn-out battery, a printer that will not print: those are hardware, and we will refer you to someone good. We do not recover data from a failed, damaged or wiped drive, and, apart from the Elite backup in Section 22.3, we are not your backup (Section 5.4).

We also do not:

If something you bring us involves health information, we settle the requirements that come with it in writing before the work starts, including a Business Associate Agreement where one is required.

If you ask us for something this membership does not cover and we are able to help, we will quote it at the member rate and get your agreement before we start.

12. Your responsibilities

You agree to give us accurate contact details, to keep them current, to be present or to give us written authorization for work on your devices and accounts, and to keep your own copies of anything important (Section 5.4).

13. Things outside anyone's control

Criminals, scammers and malware are what this membership is about, and no protection stops all of them. We are not responsible for a loss caused by a criminal act (a scam, a phishing email, ransomware, a stolen password, a break-in to an online account), by you or a household member acting on a scam, or by events beyond our reasonable control such as an internet, power or vendor outage, except to the extent that we failed to do what this Agreement says we will do. This section is subject to Section 15, and it does not excuse us for a loss that comes from our own failure: for example, setting up your protection carelessly, leaving our software on a device after your membership ends, mishandling your information, or someone at Ocala Cyber getting into your accounts or devices without authorization.

14. Software and services from other companies

We deliver parts of this membership with products from other companies: the remote management agent, the EDR software, the mobile protection app, our payment processor, the systems that carry our email and website, and, on an Elite membership, the round-the-clock watch in Section 22.2 and the cloud backup in Section 22.3. They are listed in Schedule A at the end of this Agreement, the Digital Bodyguard Privacy Notice says what each one receives, and the list can change; we tell you when it does, and we do not send your information to a company that is not on the list without updating the Notice and Schedule A first. Each company's responsibility to you is limited to what its own terms allow, and we are not responsible for a fault, outage or change in a product we do not make, except to the extent the loss results from our failing to do what this Agreement says we will do. If something goes wrong with one of them, your claim is with us under this Agreement, up to the limit in Section 15, not with that company. Where one of those companies requires you to accept specific terms, they are set out in Section 5 or Section 22 and in the Endpoint Protection Software Addendum, and nothing else makes you a party to a company's own terms.

15. Limits on what we are responsible for

We stand behind our work. If we get something wrong, we will put it right or refund the fee for the month in which it happened, and that is our promise in place of any other guarantee. WE DO NOT GIVE IMPLIED WARRANTIES. Please tell us in writing within 30 days of noticing a problem with our work so that we can put it right; that is a notice provision and does not shorten any period the law allows for a claim.

If we are responsible for a loss, the most we will pay is the greater of what our professional liability insurance actually pays out on the claim and the amount you paid us in the twelve months before the event. "Actually pays out" means amounts the insurer in fact pays under the policy; a denial or reduction of coverage does not enlarge the twelve-month figure, and nothing in this Agreement gives you a direct claim against the insurer. We are not responsible for indirect or consequential losses beyond that limit. More than one claim does not raise the limit.

None of this limits our responsibility for gross negligence, fraud or deliberate wrongdoing, and nothing in this Agreement takes away a right you have under Florida law that cannot be signed away.

16. Privacy, data handling and policies incorporated

The Digital Bodyguard Privacy Notice is part of this Agreement. It says, service by service, what information your membership collects, which companies receive it, where it is stored and how long it is kept, and we keep it accurate. We collect only what the membership needs. We will not collect a new kind of information about you, or send your information to a company not listed in Schedule A, without first updating the Notice and Schedule A and telling you before the change applies to you. Two internal policies also apply and are available on request: our AI Data Handling Policy and our Data Retention and Destruction Policy.

AI tools. We use commercial AI tools the way other cybersecurity companies do: under a paid business plan, with model training on our data turned off. They help us with our work, for example drafting plans and reports and organizing information. We keep identifying details to a minimum where practical, and a person reviews anything that reaches you, and we remain fully responsible for our work whatever tools helped produce it. We never put a password or other account credential, a Social Security number, a financial account or card number, or protected health information into an AI tool. Three things never go into one at all: the detection data from the EDR software, which we never copy out of the manufacturer's console (Section 5.7); what the round-the-clock watch sees on an Elite membership (Section 22.2); and your backed-up files (Section 22.3). Your consent. By accepting this Agreement you consent to that use of AI tools on your membership's information. You may withdraw that consent at any time by emailing contact@ocalacyber.com; withdrawal stops AI-assisted work on your information from then on, does not undo work already done, and does not change your price or what you receive. A person handles every withdrawal request.

Forwarded content. What you send us for review (emails, texts, screenshots, descriptions) is reviewed by a person, supported by automated technical checks that do not use AI; we review only what you send and do not access your mailbox, accounts or devices to do so. Forwarded content is kept for up to three years as correspondence; the Notice has the rest of the retention periods.

Payment details. Your card is entered directly with our payment provider and never reaches us.

If we have a security incident. If information of yours that we hold is accessed, taken or disclosed without authorization, we will contain it and preserve the records; tell you without unreasonable delay once we have confirmed it affects your information, and in any event within the time the law requires; tell you what we know about what happened, what information was involved, what we have done and what you may need to do, and update you as we learn more; cooperate reasonably with your own inquiries and any notice you must give; and, where a law requires notice to individuals or a regulator, agree with you in writing who gives it. An incident at one of the companies in Schedule A is handled through that company, and we pass on what it tells us; information held on a company's platform, such as endpoint detection data, is subject to that company's own incident procedures. This paragraph does not enlarge the limit in Section 15.

What we hold. You may ask us at any time for a summary of what information we hold from your membership and how it has been handled, and you may ask us to correct it or delete it; the Notice says how and how quickly we answer.

17. Notices and how we contact you

We send notices, reminders and copies of these terms to the email address on your form, and we may text or call the number you gave us about your membership. Keep both current. A link to the exact version of these terms you accepted is emailed to you when you join, and that version stays available at that address. Notices to us go to contact@ocalacyber.com; we give our mailing address for notices on request.

18. Changes to these terms

If we change these terms we will publish the updated version and email you at least 30 days before it applies to you. If you are on an annual plan, a change applies from your next renewal unless you choose to accept it sooner. If you do not want the change, cancel before it applies and we refund the unused part of any annual fee.

19. If we sell or hand over the business

If Ocala Cyber is sold or its business is taken over by someone else, this Agreement can pass to the new owner on the same terms. We will tell you, and you can cancel.

20. Governing law, disputes and which document wins

This Agreement, the Endpoint Protection Software Addendum you accepted, the Digital Bodyguard Privacy Notice and Schedule A are the whole agreement between us about your membership, and they replace anything said or written before you joined. If they disagree: for the EDR software, the mobile protection app and the round-the-clock watch, the Endpoint Protection Software Addendum you accepted governs, then this Agreement; for everything else, this Agreement governs, and the Notice describes rather than changes it.

This Agreement is governed by the laws of the State of Florida. Any dispute is heard by the courts in Marion County, Florida, and either of us may use the small claims court there. If any part of this Agreement is found unenforceable, the rest still applies. We act as an independent business, not as your employee or agent.

21. Premium membership

This section applies only if you join Digital Bodyguard Premium. Premium is joined by request, after a conversation with us. Everything in Sections 1 to 20 applies to a Premium membership too, except where this section says otherwise, and where it does, this section governs for your membership.

21.1 Price, and moving between levels

Premium membership is $149 per month or $1,610 per year. You may move between Base, Premium and Elite at any time, and the difference is prorated. This is how a move works:

21.2 Five devices, and 30 minutes of response time

A Premium membership covers up to five registered devices, in any mix of computers, phones and tablets, in place of the two in Section 11. More can be registered at the extra-device price in Section 11, quoted to you first. Registered computers are covered as Section 5 describes, and registered phones and tablets as 5.11 describes.

Your Premium membership includes 30 minutes of response time per household per calendar month (Section 6; a Base membership includes none). Everything else in Section 6 applies, including the member rate for time beyond that.

21.3 Priority response

Your household's requests go ahead of Base requests in the order we work through what reaches us (Section 7). This Agreement still sets no response time, and none should be read into it.

21.4 Network device scanning

At your set-up visit, and again when you ask us to, we find every device sharing your home network, list them for you, and go through the list with you so that nothing unknown is sitting on your WiFi. We look at what is connected and what it is; we do not get into those devices, and Section 11 still applies to the ones that are not registered.

22. Elite membership

This section applies only if you join Digital Bodyguard Elite. Elite is joined after a scoping call and a written quote. Everything in Sections 1 to 21 applies to an Elite membership too (so an Elite membership has Premium's five devices, 30 minutes, priority response and network device scanning), except where this section says otherwise, and where it does, this section governs for your membership.

22.1 Price, and prepaid retainer blocks

Elite membership is quoted to your household in writing, from $229 per month, and the quote says exactly what it covers. An annual Elite membership is ten percent less than twelve months at the quoted monthly price. Moves between levels work as Section 21.1 describes.

Prepaid retainer blocks. As an alternative to the member rate in Section 6 for time beyond your included minutes, an Elite member may buy time in advance in blocks of ten hours at $125 an hour ($1,250 a block), charged to the card on file when you ask for one. Block time is used in 15-minute increments for the same work the member rate covers, and we tell you when a block is nearly used up. Unused block time does not expire while you are an Elite member and carries over from month to month and year to year. It is not refunded in cash, and it ends, unused, when your membership ends or you move to Base or Premium.

22.2 Round-the-clock monitoring and response on your computers

What it is. On an Elite membership, your registered computers are watched around the clock, every day, by a staffed security operations center run by an outside company, through a second small program that we install beside the EDR software. When that center sees a threat in progress, it can act on the computer at once, including cutting the computer off from your network to contain the threat, and it alerts us. Computers only: the watch does not cover phones, tablets or anything else.

What it is not. Section 7 still applies to our own replies to you: this Agreement sets no response time for us. The watch does not guarantee that every threat is caught or stopped (Section 5.10), and it does not watch your online accounts (Section 11).

The response plan. Before the watch starts we agree a short written response plan with you: what the operations center may do on its own (for example isolate a computer that is under attack) and whom it contacts, which is us first and then you. You authorize the actions in that plan. Where we reasonably can, we reach you before an action that would stop you using the computer, and we always tell you about any action taken.

The outside company's terms. The company that runs the watch requires the following of each household it watches, and they are a condition of the service:

What it collects, and where it lives. The program sends that company's platform information about the computer (its identifiers and operating system), information about the programs and files on it and how they behave, including a copy of a file it suspects is malicious, and network information such as addresses and web requests. The company keeps security events for about three months and may share details of an attacker (addresses, domains, usernames) with other affected customers, industry partners and law enforcement. The Digital Bodyguard Privacy Notice has the full description. We keep no copy of what the watch sees, and 5.7 applies to it as it does to the EDR software; what you get from us is our own summary, and a monthly report of what the watch found.

Changing or ending the watch. We may change the company that runs the watch, or withdraw the watch, on 30 days' notice to you; if we withdraw it, Section 21.1 applies as if you had moved down, from the day it ends. When the watch ends for any reason, the program is removed from your computers and your access to the company's platform, if you had any, ends; 5.9 applies to the information the company still holds.

22.3 Cloud backup of your computers

What we back up. On each of your registered computers, we back up your documents and photographs to cloud storage on a schedule, and we check that the backups run and complete. At setup we agree with you which folders on each computer hold the documents and photographs to be backed up. Backup covers registered computers only. It does not cover phones, tablets or any other device.

How much. Your backup allowance is 250 GB per household, across all your registered computers. If your documents and photographs grow past that, we will tell you, and we will agree with you what the backup should leave out or what more storage costs.

Getting files back. Ask us, by email or by phone, to restore a file, a folder or everything we hold for a computer, and we will put it back on that computer or on another computer of yours. The time a restore takes us counts toward your included response time.

One copy, not a guarantee. The backup is one more copy of your files. It is not a guarantee that every file can be brought back: a backup can fail, fall behind or miss a file. Please keep your own copy of anything irreplaceable somewhere separate from your computers and from this backup (Section 5.4). We can restore only what the backup captured, and we are not responsible for a file it never captured, unless that is because we did not do what this section says we will do.

How we treat your backed-up files. We use them only to give your files back to you, and for no other purpose. We never put them into an AI tool. Checking your backups means checking that they ran and completed, not opening your files: we open a backed-up file only when you ask us to, to restore it or to confirm with you that it came back correctly.

Other people who use the computer. The backup copies what is in the folders we agree with you, whoever saved it there. If anyone else regularly uses a computer we back up, please tell them, as Section 5.8 asks you to for the protection software.

Where they are kept. Your backed-up files are held in the cloud storage of the backup service we use. Schedule A names that service, the Digital Bodyguard Privacy Notice says what it receives, and Section 14 applies to it.

When Elite ends. When your Elite membership ends, or you move to Base or Premium, we stop backing up your computers and take the backup software off them. We keep your backed-up files for 30 days from that date so that you can have them back. Ask us within those 30 days and we will help you get them back: if you are still a member, the time counts toward your included response time, and if your membership has ended, we will agree any charge for it with you before we start. After the 30 days we delete them, and after that we cannot get them back for you. If you would like them deleted sooner, tell us and we will. The same applies to the backup of a computer you take off your membership.

22.4 One on-site visit a year

In addition to the set-up visit, an Elite membership includes one on-site visit in each membership year, within Marion County (farther afield by agreement), for anything within the scope of this membership that is better done in person: a new device to set up, a network to look at, a problem to sit down with. Up to two hours; time beyond that is at the member rate or from a retainer block, agreed with you first. The visit does not include hardware repair or data recovery (Section 11). An unused visit does not carry over to the next year.

Schedule A · The companies whose products and services deliver parts of this membership

What each company receives, and why, is described in the Digital Bodyguard Privacy Notice; how responsibility for them works is Section 14. We tell you before this list changes.

CompanyUsed for
NinjaOne, LLC (ninjaone.com)The remote management agent on registered computers; the supplier through which we obtain the EDR software, the mobile protection app and the round-the-clock watch; and, on an Elite membership, the cloud backup of registered computers (Section 22.3)
SentinelOne, Inc. (sentinelone.com), supplied through NinjaOneThe EDR software on registered computers (Sections 5.2 and 5.5 to 5.10, and the Endpoint Protection Software Addendum)
Bitdefender (bitdefender.com), supplied through NinjaOneThe mobile protection app on registered phones and tablets (Section 5.11 and the Addendum)
Blackpoint Holdings, LLC (blackpointcyber.com), supplied through NinjaOneThe round-the-clock monitoring and response on registered computers, on an Elite membership (Section 22.2 and the Addendum)
Zoho Corporation (zoho.com): Zoho Checkout and Zoho PaymentsMembership billing and card payments; your card details are entered with Zoho and never reach us
Netlify, Inc. (netlify.com)Hosting the membership, Addendum and cancellation forms on our website and delivering them to us
Resend, Inc. (resend.com)Sending the welcome, acceptance-copy and cancellation emails
Google LLC (google.com): Google WorkspaceOur email, including the phishing@ocalacyber.com and contact@ocalacyber.com mailboxes you write to
Mint Mobile (mintmobile.com)Our business phone number, for calls and texts with you
Anthropic, PBC (anthropic.com)The AI tools described in Section 16, under commercial terms with no model training on our material

By submitting the membership form you confirm that you have read this Agreement, that you agree to it, including how your information is handled and the AI consent in Section 16, and that you authorize the recurring charge in Section 9.

Ocala Cyber · contact@ocalacyber.com · (352) 327-8056 · ocalacyber.com

Want a copy? Email contact@ocalacyber.com and we will send the signable document.