Privacy Policy

The data controller for personal data processed through Vigil is Lilly021 d.o.o., Novi Sad, Serbia. You can reach us about privacy at hello@getvigil.online.

We collect only the data needed to provide and operate the service:

• Account data — your name, work email, company name and password hash when you register.
• Configuration data — the projects, monitored units, runbooks and rules you set up.
• Billing data — handled by our payment processor Paddle. We receive transaction metadata (plan, status, invoices) but not your full card details.
• Usage and technical data — logs, IP address, browser type and product analytics needed for security and to improve the service.

Credentials and secrets you store for monitoring are held encrypted and referenced, never exposed in cleartext, and are treated as your data rather than data about you.

• To provide, operate and secure the service and your account.
• To run the monitoring checks you configure and deliver alerts.
• To process payments and send you service and billing communications.
• To improve the product, diagnose issues and prevent abuse.

The legal bases we rely on are performance of our contract with you, our legitimate interests in operating and securing the service, and your consent where required.

We do not sell your personal data. We share it only with service providers who process it on our behalf under appropriate agreements — including:

• Paddle — payment processing and Merchant of Record.
• Hosting and infrastructure providers — to run the platform and its database.
• Email and alerting providers — to deliver notifications you request.

We may also disclose data where required by law or to protect our rights and the safety of users.

Some of our processors may store or process data outside your country. Where we transfer data internationally we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses.

We keep personal data for as long as your account is active and as needed to provide the service. After you close your account we delete or anonymize your personal data within a reasonable period, except where we must retain it to meet legal, tax or accounting obligations.

Depending on your location, and under the GDPR, you have the right to access, correct, delete, restrict or object to the processing of your personal data, and the right to data portability. You may also withdraw consent at any time and lodge a complaint with your local data protection authority.

To exercise any of these rights, email hello@getvigil.online and we will respond within the timeframes required by law.

We apply technical and organizational measures appropriate to the risk — including encryption of secrets, access controls and tenant isolation. No system is perfectly secure, but we work continuously to protect your data.

The website and dashboard use essential cookies to keep you signed in and to secure the service, and limited analytics cookies to understand usage. You can control cookies through your browser settings.

We may update this policy from time to time. Material changes will be communicated by email or through the service, and the "last updated" date above will change.