Privacy Policy | Vigilent Technologies

Draft notice. This document is a first-pass draft prepared for attorney review. Do not treat this version as final or as legal advice.

Key point about the Audit Tool. The Audit Tool is an internal instrument operated by Vigilent staff to deliver Code Assessment engagements — it is not a public, self-service utility. Source code or files you provide to us for an audit are received and processed by authorized Vigilent staff solely to perform your engagement, under the confidentiality terms of your statement of work.

1. Who we are

This Privacy Policy explains how Vigilent Technologies LLC ("Vigilent," "we," "us," or "our"), an Oklahoma limited liability company with its principal address at 519 SW 4th Street, STE 105, PMB 1034, Moore, OK 73160, collects, uses, and shares personal information about you.

For the purposes of applicable data protection laws, Vigilent is the "controller" (or "business" under California law) responsible for your personal information.

2. Information we collect

2.1 Information you provide directly

When you interact with our Services, you may provide us with information such as:

Consultation and contact form data — your name, business email, phone number, company name, and a brief description of your project or inquiry.
Scheduling data — dates, times, and time-zone preferences you submit through booking forms.
Vigilent Labs registration — name, business email, and account credentials, once Vigilent Labs is activated for staff/authorized users.
Correspondence — email or messages you send us, and our responses.

2.2 Information related to the Audit Tool

The Audit Tool is an internal instrument used by authorized Vigilent staff to deliver Code Assessment engagements. Any source code, configuration, or files you provide to us for an audit are received and processed by our staff solely to perform your engagement, and are handled under the confidentiality terms of your statement of work. We do not use engagement source code for any purpose outside delivering your engagement, and do not resell, aggregate, or repurpose it.

2.3 Information collected automatically

When you visit the Site, our hosting provider and Site infrastructure automatically log limited technical information such as your IP address, browser type, referring URL, pages viewed, and timestamps. We use this information for security, troubleshooting, and aggregate analytics.

2.4 Information from third parties

Publicly available news articles displayed on the "Cyber News" page are retrieved through a third-party RSS aggregator. This flow does not involve personal information about you.

3. How we use information

We use the information we collect to:

Respond to your consultation requests, contact inquiries, and scheduling requests;
Provide, maintain, and improve the Services;
Communicate with you about your account, our Services, and, with your consent where required, marketing or educational content;
Protect against fraud, abuse, and security threats;
Comply with legal obligations and enforce our Terms of Service and Acceptable Use Policy.

4. Legal bases (for individuals in the EU / UK)

If you are located in the European Economic Area, the United Kingdom, or a jurisdiction with a similar legal framework, we process your personal information on the following legal bases:

Contract — to enter into or perform a contract with you (e.g., responding to your consultation request).
Legitimate interests — to operate, secure, and improve our Services, provided our interests are not overridden by your rights.
Consent — where we ask for it (e.g., marketing emails).
Legal obligation — where processing is required by law.

5. Sharing & disclosure

We do not sell your personal information. We share personal information only in these limited circumstances:

Service providers — with vendors that help us operate the Services (for example, our website hosting provider). These vendors are bound to use personal information only to provide services to us.
Legal and safety — when we believe disclosure is required by law, valid legal process, or is necessary to protect the rights, property, or safety of Vigilent, our customers, or the public.
Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality protections.
With your consent — with third parties when you direct us to.

6. Data retention

We keep personal information only as long as necessary for the purposes described in this Policy, unless a longer retention period is required or permitted by law.

Type of information	Retention
Consultation and contact form entries	Up to 24 months after last interaction, then deleted or anonymized.
Email correspondence	As long as needed for the business relationship; deleted on request subject to legal holds.
Vigilent Labs accounts (when activated)	For the life of the account plus 30 days after termination.
Technical logs	Up to 12 months.
Files uploaded to the Audit Tool	Not received or stored by Vigilent.

7. We do not sell personal information

Vigilent does not sell personal information as that term is defined in the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and we do not "share" personal information for cross-context behavioral advertising. If this ever changes, we will update this Policy and provide the opt-out mechanisms required by law.

8. Your rights & choices

Depending on where you live, you may have some or all of the following rights over your personal information: to know or access what we hold about you; to request correction of inaccurate information; to request deletion; to object to or restrict certain processing; to withdraw consent where processing is based on consent; and to lodge a complaint with a supervisory authority.

To exercise any of these rights, email us at mroberson@vigilenttechnologies.com. We will respond within the timeframe required by applicable law. We may need to verify your identity before responding to your request.

9. Cookies & similar technologies

The Site uses only cookies and similar technologies that are strictly necessary to operate the Site (for example, remembering your session on Vigilent Labs). We do not currently use third-party advertising cookies or behavioral tracking cookies. If we introduce optional cookies in the future, we will present a cookie notice and obtain your consent where required.

10. Security

Vigilent uses reasonable administrative, technical, and physical safeguards to protect personal information. However, no method of transmission or storage is 100% secure. You are responsible for keeping your account credentials confidential.

11. International transfers

Vigilent is based in the United States and processes personal information there. If you access the Services from outside the United States, you understand that your information may be transferred to, stored, and processed in the United States, which may have different data-protection laws than your jurisdiction.

12. Children's privacy

The Services are intended for business users age 18 and older. We do not knowingly collect personal information from children under 13 (or under 16 in the European Economic Area). If you believe a child has provided us with personal information, please contact us and we will delete it.

13. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will change the "Effective" date at the top and, for material changes, provide notice through the Services or by email. Your continued use of the Services after the updated Policy takes effect constitutes your acceptance of it.

14. Contact us

Questions or requests about this Privacy Policy or your personal information:

Vigilent Technologies LLC
Attn: Privacy
519 SW 4th Street, STE 105, PMB 1034
Moore, OK 73160
Email: mroberson@vigilenttechnologies.com
Phone: (800) 716-0084

This Privacy Policy is a first-pass draft prepared for attorney review and is not legal advice.