Privacy Policy
Last updated: 2026-05-12
Your privacy matters. This Privacy Policy explains what we collect, why we collect it, and the choices you have. We try to keep it short and readable.
1. Overview
This Privacy Policy explains how Vigolium (“we”, “us”) collects, uses, and protects information when you visit our website, request a demo, or use our products and related services (collectively, the “Service”). We aim to collect only what we need to operate, secure, and improve the Service.
2. Information We Collect
Information you provide. When you contact us, request a demo, or sign up, we collect details such as your name, email address, company, and any message or questionnaire responses you choose to send.
Usage information. When you visit our website, we automatically collect basic technical information including IP address, browser type, device type, pages viewed, referring URL, and timestamps.
Customer Content. If you use the Vigolium product, we process the code, configuration, scan targets, and findings you submit to or generate with the Service. We treat this as confidential.
3. How We Use Information
We use the information we collect to: (a) operate, maintain, and secure the Service; (b) respond to inquiries and provide support; (c) understand how the Service is used and improve it; (d) detect, prevent, and respond to fraud, abuse, and security incidents; and (e) comply with legal obligations.
4. Cookies and Analytics
We use cookies and similar technologies, together with third-party product analytics providers, to understand how visitors interact with our website and product. This helps us measure traffic, diagnose issues, and improve the experience. You can disable cookies in your browser, but parts of the site may not work as intended.
5. How We Share Information
We do not sell your personal information. We share information only with: (a) service providers who process data on our behalf, such as hosting providers, analytics providers, email and communication providers, and security tooling, under contractual confidentiality obligations; (b) authorities or other parties when required by law, legal process, or to protect rights, safety, or property; and (c) successors in the event of a merger, acquisition, or sale of assets, subject to equivalent privacy protections.
6. Data Retention
We retain personal information only as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Customer Content is retained according to the terms of your engagement with Vigolium and is deleted on request, subject to legal retention requirements.
7. Security
We follow industry-standard practices to protect information, including encryption in transit, encryption at rest where applicable, least-privilege access controls, multi-factor authentication, access logging, and vendor risk review. No system is perfectly secure, and we cannot guarantee absolute security.
8. Your Rights
Depending on where you live, you may have rights regarding your personal information, including the right to access, correct, delete, restrict, or port your data, and to object to certain processing. Residents of the European Economic Area, the United Kingdom, and certain other regions have rights under the GDPR. Residents of California have rights under the CCPA/CPRA, including the right to know what information we collect, to delete it, to correct it, and to opt out of sale or sharing (we do not sell personal information). To exercise any of these rights, contact us at the address below. We will not discriminate against you for exercising your rights.
9. International Transfers
We may process information in countries other than the one where you live. When we transfer personal data out of regions with stricter data protection laws, we use appropriate safeguards such as standard contractual clauses or equivalent mechanisms.
10. Children
The Service is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
11. Third-Party Links
The Service may link to third-party sites and tools we do not control. This Privacy Policy does not apply to those third parties; their own privacy policies do.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date above. Material changes will be communicated through the Service or by email where appropriate.
13. Contact
Privacy questions or requests? Contact us at contact@vigolium.com.