Privacy policy

Plain-language version. Last updated October 13, 2026.

What we collect

Your name, email, and password (stored as a one-way hash — we can't read it, only check it). The case details and evidence files you upload. Payment confirmations from Stripe — we never see or store your card number. If you use an anonymous case, we collect no name, email, or password at all. We also count anonymous visits to the site (rough country, page viewed, device type) so we know Vigil is reaching people — IP addresses are never stored and no visitor is ever identified.

Where it lives

Your cases are stored on Vigil's server in Toronto, Canada. A backup copy is kept off-site so your evidence survives a server failure. Some processing happens outside Canada: OpenAI, Stripe, and Resend operate in the United States. Uploads are stored off the public web — there's no URL anyone can guess to reach them.

What we do with it

We use it to run Vigil: your account, your cases, your downloads. Evidence you upload is used only to build your case file. We do not sell your data. We do not share it with advertisers.

Who helps us run Vigil

Stripe processes your payments. Resend delivers our account emails (like verification and password resets), so your email address passes through their service. OpenAI's API powers the evidence organizer (see below). That's the whole list — no advertisers, no data brokers, no one else.

AI processing

When you ask Vigil to organize your evidence, the text you provided is sent to OpenAI's API to generate your timeline, claims, and exhibit list. OpenAI states that data sent to its API is not used to train its models (we haven't opted in to anything else). For abuse monitoring, OpenAI may keep logs containing your content for up to 30 days. File contents are processed only as needed to build your file.

Evidence integrity

Every uploaded file gets a SHA-256 fingerprint the moment it arrives, and your originals are never modified — anything Vigil derives from them (extracted text, summaries) is a separate copy. If a file ever changed, its fingerprint wouldn't match.

What not to upload

Don't upload passwords, recovery phrases, or banking login credentials. Black them out of screenshots before uploading — Vigil can't use them and shouldn't hold them.

Who can see your cases

Your cases aren't public. Only you, through your Vigil login, can open them — unless you share your downloaded package yourself. Authorized Vigil operators may access stored information when needed to operate, secure, troubleshoot, or support the service. We will disclose information only if required by law.

Anonymous cases

You can use Vigil without giving your name or email address. An anonymous case is opened with a secret link instead of a login — anyone with the link can open it, and there is no password to reset. If you lose the link, your case is gone forever: we cannot find it for you because we hold no identity for anonymous cases. Anonymous cases delete themselves 30 days after your last activity unless you change that on the case page.

One honest limit: when you ask Vigil to organize your evidence, the text you provided is still sent to OpenAI's API to build your case file (not used to train models; security logs may be kept up to 30 days). Anonymous means Vigil doesn't know who you are — not that the text never leaves your device.

How long we keep it

Until you delete it — or until you tell us to delete it for you. Every case page has a "Your data, your choice" section where you pick: keep until you delete it, delete 7/30/90 days after your last activity, or delete right after you download your finished package. Delete a case and its uploads are deleted from the live system immediately; copies in backups age out within 30 days. "Download my package and delete everything" downloads your finished PDF first, then wipes the case and every file attached to it.

Deletion

Delete any case from its page — that removes the case and every file attached to it. To delete your whole account and everything in it, go to Settings and use "Delete your account." It asks you to type a confirmation, then it's gone — there is no undo, so download anything you want to keep first.

Security

Passwords are one-way hashed (bcrypt), login sessions expire after 30 days, and everything travels over HTTPS. No system is perfect — keep your own copies of important originals.

Questions about your privacy

Email help@getvigil.ca and we'll answer. If you want a copy of everything Vigil holds about you, ask at the same address.