Privacy Policy

1. Introduction

Vigil ("Company," "we," "us," or "our") operates a clinical decision support and medical education platform for anesthesiology professionals. This Privacy Policy describes how we collect, use, and protect information when you use our website and services (collectively, the "Service").

By using the Service, you consent to the practices described in this Privacy Policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Name (optional)
• Password (stored in hashed form)
• Professional role or affiliation (optional)

2.2 Usage Information

We automatically collect:

• Clinical queries submitted to our AI assistant
• Features accessed and actions taken
• Device type, browser, and operating system
• IP address and approximate location
• Date and time of access

2.3 Information We Do NOT Collect

3. How We Use Information

We use collected information to:

• Provide, maintain, and improve the Service
• Process transactions and send related information
• Respond to your inquiries and support requests
• Send updates, security alerts, and administrative messages
• Analyze usage patterns to improve our offerings
• Prevent fraud and enforce our terms

4. Information Sharing

We do not sell your personal information. We may share information only:

• With service providers who assist in operating our platform (hosting, analytics, payment processing), bound by confidentiality obligations
• For legal compliance when required by law, court order, or governmental authority
• To protect rights when necessary to enforce our terms, protect our rights, or ensure safety
• In business transfers if we are involved in a merger, acquisition, or sale of assets (with prior notice)

5. Data Security

We implement reasonable technical and organizational measures to protect your information, including:

• Encryption of data in transit using TLS
• Secure password hashing
• Regular security assessments
• Access controls limiting who can view data

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide services. Conversation history is retained for 90 days by default; you may delete conversations at any time. Upon account deletion, we will delete or anonymize your data within 30 days, except where retention is required by law.

7. Your Rights

Depending on your jurisdiction, you may have rights to:

• Access your personal information
• Correct inaccurate data
• Delete your account and associated data
• Export your data in a portable format
• Opt out of marketing communications
• Withdraw consent where processing is based on consent

To exercise these rights, contact us at the address below.

8. Cookies

We use essential cookies to maintain your session and remember preferences. We do not use third-party advertising or tracking cookies. You can control cookies through your browser settings.

9. Third-Party Links

The Service may contain links to third-party websites (such as PubMed). We are not responsible for the privacy practices of these external sites.

10. Children's Privacy

The Service is intended for healthcare professionals and is not directed to individuals under 18. We do not knowingly collect information from children.

11. International Users

If you access the Service from outside the United States, your information may be transferred to and processed in the United States, where data protection laws may differ from your jurisdiction.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the revised policy and updating the effective date. Your continued use after changes constitutes acceptance.