Last updated: November 3, 2026
This version takes effect on December 3, 2026. Until then, the version of October 27, 2026 applies. To request a copy of it, email legal+privacy@vigilbase.com.
1. Who we are
Vigilbase operates through Vigilbase LLC (Wyoming, United States), Vigilbase Labs Inc. and Vigilbase Cybersecurity Ltd. (Dubai International Financial Centre, United Arab Emirates), and may operate through additional related entities in the future. This policy applies to all of them.
This policy explains how Vigilbase handles personal information as a controller: on our websites, in our free tools, when you contact us, and when we manage customer and partner accounts. Vigilbase LLC, 1908 Thomes Ave #12112, Cheyenne, WY 82001, United States, is the controller for our websites, tools and marketing. For a customer or partner relationship, the controller is the Vigilbase entity that contracts with that customer or partner, as named in its agreement.
When we process personal information on behalf of a customer, for example data in the systems we protect or monitor for them, we act as that customer's processor under our Data Processing Addendum, and the customer's own privacy notice applies.
2. Information we collect
- Information you give us: name, email address, phone number, company, job title and messages when you contact us, sign up, book a meeting, apply to become a partner or subscribe to updates.
- Account and billing information: sign-in details, roles, preferences, billing contacts, invoices and payment status. Card details are handled by Stripe and we do not store them.
- Tool and service information: the domains, URLs, email addresses and Cloudflare account details you submit to our tools, and the results we generate. If you sign in with Cloudflare, we receive the email address on your Cloudflare account.
- Conversations: messages with Vigil, our AI assistant, and with our support team, including calls and text messages.
- Device and usage information: IP address, browser and device type, pages viewed, referring page, and interactions, collected through logs, cookies and similar technologies as described in section 9.
- Information from others: business contact and company details from partners who refer you, and from data providers such as Amplemarket, and public information about your company.
- SMS/text messaging opt-in data and consent records.
When a Vigilbase partner or employee sends you a link to a Vigilbase document, such as a datasheet, opening it records when you viewed it, the time spent on each page, whether you downloaded it, your approximate country, your device type and a shortened IP address. This is shared with the person who sent the link. The shortened IP address and browser details are deleted after 30 days, and the view records after 13 months.
3. How we use it and our legal bases
Where the GDPR, UK GDPR or a similar law applies, we rely on the legal bases shown below.
| Purpose | Legal basis |
|---|---|
| Providing the Services, accounts, support and billing | Performance of a contract, and our legitimate interest in serving the business customers our users work for |
| Running free tools and sending their reports | Performance of a contract with you, and our legitimate interest in preventing abuse |
| Security, fraud prevention and protecting the Services | Legitimate interests and legal obligations |
| Answering enquiries and sales communication with businesses | Legitimate interests, or consent where the law requires it |
| Newsletters, marketing email and text messages | Consent, or legitimate interests for existing business customers where the law allows; you can opt out at any time |
| Analytics and session replay | Consent where the law requires it, otherwise legitimate interests |
| Advertising measurement | Consent where the law requires it, otherwise legitimate interests |
| Compliance, accounting, tax and legal claims | Legal obligations and legitimate interests |
Vigil, our AI assistant, uses AI models from Anthropic and OpenAI, called directly or through Cloudflare AI Gateway, and Cloudflare Workers AI to answer your messages. These providers process conversations only to provide the service to us and do not use them to train their models.
5. International transfers
Our entities and teams are located around the world, so your information may be processed outside your country. Where the law requires, we protect transfers with the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or other mechanisms that the law recognizes, and with the safeguards described in our Data Processing Addendum.
6. How long we keep it
| Information | How long |
|---|---|
| Account information | While the account is active, then up to 2 years unless the law requires longer |
| Invoices and accounting records | As long as tax and accounting law requires, typically 7 years |
| Business contacts and enquiries | While we have an ongoing business interest; we review inactive contacts at least every 2 years |
| Free tool results | Until the report expires, and in any case no longer than 13 months |
| Vigil conversations on our websites | Up to 13 months |
| Security and access logs | At least 12 months, longer when needed to investigate an incident |
| Shared document view records | 13 months; shortened IP addresses and browser details 30 days |
7. Security
We protect personal information with the technical and organizational measures of our ISO 27001 and SOC 2 Type 2 compliant security program, including encryption in transit and at rest, access controls and monitoring. Details are in our Trust Center. No method of transmission or storage is completely secure.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict its processing, to withdraw consent, and to opt out of marketing, targeted advertising, or the sale or sharing of personal information. You can opt out of text messages by replying STOP.
To exercise your rights, email legal+privacy@vigilbase.com or use our request form. We will verify your request and respond within the time the law requires. You may use an authorized agent where the law allows. If we decline your request, you can appeal by replying to our decision, and you can complain to your data protection authority.
We do not make decisions with legal or similarly significant effects about you based solely on automated processing.
10. Information for specific regions
- European Economic Area, United Kingdom and Switzerland: you can complain to the data protection authority where you live or work. For the GDPR, contact us at legal+privacy@vigilbase.com.
- California and other US states: in the last 12 months we collected the categories of information in section 2 for the purposes in section 3. We do not sell personal information for money. Advertising cookies may count as sharing for cross-context behavioral advertising; you can opt out with Cookie settings or a Global Privacy Control signal. We do not use sensitive personal information to infer characteristics about you.
- South Africa: our Information Officer can be reached at legal+privacy@vigilbase.com. You can complain to the Information Regulator.
- Kenya: you can complain to the Office of the Data Protection Commissioner.
- United Arab Emirates: Vigilbase Cybersecurity Ltd. is registered in the Dubai International Financial Centre. Where it is the controller, the DIFC Data Protection Law 2020 applies and you can complain to the DIFC Commissioner of Data Protection.
- Brazil: you can contact the Autoridade Nacional de Proteção de Dados (ANPD).
11. Children
Our services are for businesses and are not directed to anyone under 18. We do not knowingly collect personal information from children and will delete it if we learn that we have.
12. Changes
We will post changes on this page and update the date above. If a change is material, we will tell account holders by email or in the product before it takes effect.
13. Contact
Questions about your privacy?
- Phone
- +1 (855) 458-4445
- Address
- Vigilbase LLC
Privacy
1908 Thomes Ave #12112
Cheyenne, WY 82001
United States