VigiloIQ is committed to protecting your privacy and ensuring the security of your data.

Welcome to VigiloIQ ("we," "us," "our," or "VigiloIQ"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our contract analysis platform and services (collectively, the "Services").

We understand that you may upload sensitive legal documents and contracts to our platform. We take your privacy seriously and are committed to maintaining the highest standards of data protection and security.

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Services.

Information We Collect

Information You Provide Directly: We collect information that you voluntarily provide to us, including account information (name, email address, company name, job title, phone number, billing address, and payment information), profile information, contract documents you upload for analysis, communications with our support team, and playbook data including negotiation preferences and custom templates.

Information Collected Automatically: When you use our Services, we automatically collect usage data (features used, documents analyzed, time spent on platform), device information (IP address, browser type and version, operating system), log data (access times, pages viewed, referring URLs), and information from cookies and tracking technologies.

Information from Third Parties: We may receive information from authentication services if you sign in using Google, Microsoft, or other SSO providers, payment processors for transaction information, analytics providers for usage statistics, and business partners with your consent.

How We Use Your Information

We use the collected information to provide and improve our Services, including delivering contract analysis, AI-powered insights, and negotiation recommendations. We process and analyze uploaded documents using artificial intelligence and machine learning to maintain and optimize platform performance, develop new features, and personalize your experience.

For account management and support, we use your information to create and manage your account, authenticate users, provide customer support, and send service-related notifications. We also use it for business operations including processing payments, detecting fraud and security issues, enforcing our Terms of Service, and complying with legal obligations.

With your consent, we may send product updates, newsletters, and promotional materials, conduct surveys, and provide information about new features or services.

AI Processing and Machine Learning

Your uploaded contracts are processed by our AI models to identify clauses, assess risks, and provide insights. We may use third-party AI service providers (such as OpenAI, Google Cloud AI, or Azure AI) to process documents. These providers are bound by strict confidentiality and data protection agreements.

We do NOT use your specific contract content to train our general AI models unless you explicitly opt-in to our training program. Any data used for training is anonymized and aggregated. Processed documents are retained according to our data retention policy, and we treat all uploaded contracts as confidential with appropriate security measures.

You retain all intellectual property rights to your documents. We claim no ownership over your contracts or their content.

How We Share Your Information

We do not sell your personal information. We may share your information only in the following circumstances:

• With Your Consent: We share information when you explicitly authorize us to do so
• Service Providers: Cloud infrastructure (AWS, Google Cloud, Azure), AI services (OpenAI, Google Cloud AI), payment processing (Stripe, PayPal), analytics services, customer support platforms, and email services
• Business Transfers: If VigiloIQ is involved in a merger, acquisition, bankruptcy, or sale of assets
• Legal Requirements: Valid legal processes, governmental requests, protecting our rights, and preventing fraud

All service providers are contractually obligated to protect your information and use it only for the purposes we specify.

Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data is encrypted in transit (TLS/SSL) and at rest (AES-256)
• Access Controls: Role-based access controls and multi-factor authentication
• Infrastructure Security: SOC 2 compliant cloud infrastructure with regular security audits
• Employee Training: All employees undergo security and privacy training
• Incident Response: Documented procedures for security incident detection and response
• Regular Audits: Third-party security assessments and penetration testing
• Data Backups: Regular encrypted backups with disaster recovery procedures

Your Rights and Choices

Depending on your location, you may have the following rights:

Access and Portability: Request a copy of your personal information, export your data in a machine-readable format, and access your account data through your dashboard.

Correction and Deletion: Update or correct your personal information through your account settings, request deletion of your account and associated data, and delete specific documents or contracts at any time.

Opt-Out Rights: Unsubscribe from marketing emails (does not affect service-related communications), disable cookies through your browser settings, opt-out of analytics tracking, and decline participation in AI model training programs.

To exercise these rights, contact us at support@clauselogic.com. We will respond to your request within 30 days. You may also have the right to lodge a complaint with a data protection authority.

Cookies and Similar Technologies

We use cookies and similar tracking technologies to improve your experience. Types of cookies we use:

• Essential Cookies: Required for authentication, security, and basic functionality
• Performance Cookies: Help us understand how you use our Services (Google Analytics)
• Functional Cookies: Remember your preferences and settings
• Targeting Cookies: Used for marketing purposes (only with your consent)

You can control cookies through your browser settings (most browsers allow you to refuse or delete cookies), our cookie consent banner when you first visit our website, and opt-out tools provided by advertising networks. Note: Disabling essential cookies may affect your ability to use certain features of our Services.

How We Secure, Store and Retain Your Data

We retain your information for as long as necessary to provide our Services and fulfill the purposes described in this Privacy Policy:

• Account Data: Retained while your account is active
• Uploaded Documents: Retained until you delete them or close your account
• Backup Data: Retained for 90 days in encrypted backups
• Usage Logs: Retained for 12 months for security and analytics purposes
• Financial Records: Retained for 7 years to comply with legal obligations

Account Deletion: When you delete your account, we delete your personal information and documents within 30 days, except where we're required to retain data for legal, tax, or regulatory purposes.

Anonymized Data: We may retain anonymized, aggregated data indefinitely for analytics and product improvement purposes.

International Data Transfers

VigiloIQ operates globally. If you access our Services from outside the United States, your information may be transferred to, stored, and processed in countries where our servers or service providers operate.

When we transfer data internationally, we implement appropriate safeguards, including Standard Contractual Clauses approved by the European Commission, adequacy decisions by relevant data protection authorities, and Data Processing Agreements with service providers. EU/EEA Users: We comply with GDPR requirements for international data transfers.

Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@clauselogic.com, and we will delete such information from our systems.

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: What personal information we collect, use, and disclose
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the sale of personal information (we do not sell personal information)
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise these rights, contact us at privacy@clauselogic.com. You may designate an authorized agent to make requests on your behalf with written proof of authorization.

GDPR Rights (European Users)

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR):

Legal Basis for Processing: We process your personal data based on contract performance (to provide the Services), legitimate interests (to improve Services, prevent fraud, ensure security), consent (for marketing and optional features), and legal obligations.

Your GDPR Rights include: Right of access and data portability, right to rectification, right to erasure ("right to be forgotten"), right to restrict processing, right to object to processing, right to withdraw consent, and right to lodge a complaint with a supervisory authority.

Contact our Data Protection Officer at dpo@clauselogic.com for GDPR-related inquiries.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

Notice of Changes: We will notify you of material changes by posting the updated Privacy Policy on this page with a new "Last Revised" date, sending an email notification to your registered email address, and displaying a prominent notice on our platform.

Continued Use: Your continued use of our Services after changes become effective constitutes acceptance of the updated Privacy Policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• General Privacy Inquiries: support@clauselogic.com

We are committed to resolving complaints and will respond to your inquiry within 30 days.