Privacy Policy

1. Information We Collect

Account information: When you register, we collect your name, email address, company name, and password. If you subscribe to a paid plan, payment information is processed securely by Stripe — we do not store your card details.

Third-party API data: When you connect Google Analytics 4, Google Search Console, or Ahrefs, we access your data via read-only API connections. This includes website traffic metrics, search performance data, keyword rankings, backlink profiles, and related analytics. We only request the minimum permissions necessary.

Usage data: We collect information about how you interact with Vigil, including pages visited, features used, AI questions asked, and reports generated. This helps us improve the product.

2. How We Use Your Information

• To provide, maintain, and improve the Vigil platform
• To monitor your client sites and generate AI-powered analyses
• To send alerts and notifications via Slack and email
• To generate reports on your behalf
• To process payments and manage your subscription
• To communicate with you about your account, updates, and support
• To detect and prevent fraud, abuse, or security incidents

3. Data Storage & Security

We take the security of your data seriously. All data is encrypted at rest using AES-256 encryption and in transit using TLS 1.3. Our infrastructure is hosted on industry-leading cloud providers with SOC 2 compliance.

We access your third-party accounts (GA4, GSC, Ahrefs) via read-only API connections only. We never modify, delete, or write data to any of your connected services.

Access to customer data is restricted to authorised personnel on a need-to-know basis. We conduct regular security reviews and maintain comprehensive audit logs.

4. Third-Party Services

We integrate with the following third-party services to provide our platform:

• Google APIs (Analytics Data API, Search Console API, Docs API, Drive API) — to access your analytics data and generate reports
• Ahrefs API — to access backlink and keyword data
• Slack API — to deliver alerts and insights to your team
• Stripe — to process subscription payments securely
• Anthropic — to power our AI analysis capabilities

Each third-party service has its own privacy policy. We encourage you to review their policies for details on how they handle your data.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide the service. Historical analytics data is retained according to your subscription plan (6, 12, or 24 months depending on your tier).

When you delete your account, we will permanently delete your data within 30 days, unless we are required by law to retain it for a longer period.

6. Your Rights (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request permanent deletion of your personal data
• Right to data portability — request your data in a structured, machine-readable format
• Right to restrict processing — request that we limit how we use your data
• Right to object — object to processing based on legitimate interests

To exercise any of these rights, contact us at support@joinvigil.co. We will respond within 30 days.

7. Cookies

Vigil uses essential cookies to maintain your session and keep you logged in. We may use analytics cookies to understand how users interact with our platform. We do not use advertising or tracking cookies. You can control cookie settings through your browser preferences.

8. Children's Privacy

Vigil is not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will promptly delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through a prominent notice on our platform. Your continued use of Vigil after changes take effect constitutes acceptance of the updated policy.

10. Contact Information