PRIVACY
What Vigil knows about you.
Short version: your name, your email, and which version you downloaded. Your agent sessions never leave your computer.
Last updated September 27, 2026
When you create an account
- Name and email: so we can identify your account and, if you agree, tell you about new versions.
- Password: stored only as a one-way hash by our authentication provider. Nobody at Vigil can read it.
- Your email preference: whether you opted in to update emails, and when.
- Sign-in time: the latest successful account sign-in, maintained by our authentication provider and visible to the founder.
- Feedback: messages you choose to submit, their category and status, linked to your account so we can review them. The founder can review account and download records to support users.
- Downloads: the version you downloaded and when.
What the app sends
About once a day, the installed app asks vigilit.app whether a newer version exists. That request contains only the app’s own version number. Like any web request it reaches our servers from your IP address; we don’t store it against your account.
Nothing about your work is sent. Session state — which can include project paths, commands and tool names — is written to ~/.vigil on your computer and stays there. There is no analytics, no crash reporting, and no telemetry in the app.
Vigil does measure itself, on your machine: how long your agents spent waiting, how quickly approvals were answered, and how many pop-ups it decided not to show you. Those timings live in ~/.vigil/metrics.jsonl, hold no commands or file paths, and are shown to you under What Vigil did… in its menu. They are never uploaded — we cannot see them.
We only email you about new versions if you ticked the box when signing up, and every message has an unsubscribe link. Account messages you ask for — confirmation and password reset — are sent regardless. We don’t sell, rent or share your details for anyone else’s marketing.
Who processes it
- Supabase: account database, authentication and build storage (United States).
- Vercel: hosts this website (United States).
Keeping and deleting it
We keep your account until you ask us to delete it. Email privacy@vigilit.app from the address on your account and we’ll delete your account and download history and feedback within 30 days. You can ask for a copy of what we hold the same way.
Changes
If this policy changes in a way that matters, we’ll update the date above and tell account holders by email.