Privacy Notice

1. Who we are

Vigil is provided by YG. YG is the data controller for personal data about our account holders and website visitors. For data your agents send into Vigil (prompts, traces, documents), you are the controller and we process it on your behalf to provide the Service. Contact us at support@vigiltrism.ai.

2. Data we collect and why

• Account data (name, email, password hash, organization, role) — to create and secure your account and provide the Service. Basis: contract.
• Agent telemetry (prompts, outputs, retrieved documents, tool calls, metadata) — to run guardrails, show monitoring and keep audit logs. Basis: contract.
• Usage and device data (IP address, browser, pages used, logs) — for security, fraud prevention and improving the product. Basis: legitimate interests.
• Support messages — to answer your requests. Basis: contract and legitimate interests.
• Marketing preferences — to send product updates where you've agreed. Basis: consent, which you can withdraw at any time.

The free scanner at /scan runs in your browser; what you type there is not sent to or stored by us.

3. Who we share it with

• Service providers that host and run the Service (cloud hosting, database, email delivery).
• Paddle.com, our Merchant of Record, for the sale of the product, subscription management, payments, tax compliance and invoicing.
• Professional advisers such as lawyers and accountants.
• Authorities where required by law.

We do not sell personal data.

4. International transfers

Our providers may process data outside your country, including outside the UK/EEA. Where they do, we rely on adequacy decisions or Standard Contractual Clauses.

5. Retention

Account data is kept while your account is active. Agent telemetry is kept for your plan's retention period and then deleted automatically. When data is no longer needed it is deleted or anonymised, unless the law requires us to keep it longer.

6. Your rights

Depending on where you live, you can access, correct, delete, restrict or export your data, object to processing, and withdraw consent. You can also complain to your data protection authority. We respond within one month. To use these rights, email support@vigiltrism.ai.

7. Security

We use appropriate technical and organisational measures, including encryption in transit, hashed API keys, row-level access controls and least-privilege roles. Report security issues to support@vigiltrism.ai.

8. Cookies

We use only essential cookies and browser storage needed to keep you signed in and remember your workspace. We do not use advertising cookies. You can clear them in your browser, but you'll be signed out.