Privacy Policy

Effective: March 7, 2026

Summary

Vigil collects zero data. It is self-hosted software that runs entirely on your infrastructure.

1. Data Collection

Vigil does not collect, transmit, or store any data on external servers. All data remains on your machine or server:

Scan results are stored locally in JSON files or your PostgreSQL database
Credentials are encrypted with AES-256-GCM and stored locally
Session data is stored locally
No analytics, no telemetry, no phone-home

2. AI Features (BYOK)

When you use AI features, Vigil shells out to CLI tools (Claude, Codex) that you install and authenticate. Your AI interactions go directly between your machine and your AI provider. Vigil does not intercept, log, or relay these interactions.

3. Third-Party Services

Vigil may connect to external services only when you explicitly request it:

Scanner targets you specify (nmap, nuclei, nikto scans)
RSS feeds you configure for threat intelligence
Docker registries for container image scanning
DNS/WHOIS servers for reconnaissance

4. Website (vigil.agency)

This website is a static page hosted on GitHub Pages. It does not use cookies, analytics, or tracking scripts.

5. Contact

Questions: hello@vigil.agency