Privacy Policy

Vigil ("we", "us") helps you scan websites you own or are authorised to test. This policy explains what we collect and why. We keep it short because our data use is simple.

What we collect

• Scan data: the URL you submit and the public responses we read from it. We generate a report from this.
• Account data: your email address, if you create an account.
• Billing data: handled by Stripe. We never see or store your card details.
• Basic analytics: aggregate, privacy-respecting usage metrics.

Secrets we detect

When a scan surfaces something that looks like a secret key, we mask it in the report and never store the raw secret. Treat any key shown in a report as compromised and rotate it.

How we use data

• To produce and store your scan reports and monitor your sites (if enabled).
• To operate your account and process payments.
• To email you alerts you asked for, and important service notices.

Sharing

We share data only with the processors that run the service: our hosting provider, our database provider (Supabase), Stripe for payments and our email provider. We do not sell your data.

Your rights

You can export or delete your data at any time by emailing privacy@vigilsec.app. Deleting your account removes your scans and monitors.

Contact

Questions: privacy@vigilsec.app.