Your information & your choices
Privacy Policy
Last updated
This policy describes how Vigilare Systems, Inc. ("Vigilare," "we," "us") collects, uses, and shares personal information through vigilareinc.com, app.vigilareinc.com, and our monitoring services. It applies to clients, advisors, and website visitors.
Reading this policy does not authorize bank access or replace the separate monitoring consent presented in the app. A financial advisor or institution may also have its own privacy notice.
1. Information we collect
Depending on your role, the services you use, and the accounts you connect, we collect:
- Account and profile information: name, email, date of birth, address, marital status, education, occupation complexity, and cognitive-engagement responses. Profile intake also collects a Social Security number for credit-report functionality.
- Authentication and consent records: sign-in information, password hashes, verification and reset records, consent wording and timestamps, and account-sharing preferences.
- Connected financial information: institution and account details, account-owner names where available, masked account numbers, balances, transactions, merchant or recipient descriptions, recurring payments, investment holdings or activity, and liabilities. The information available depends on your institution and enabled products.
- Credit information: credit scores, credit-report information, and report artifacts when credit-report functionality is used.
- Monitoring information: detected patterns, risk scores, financial-behavior inferences, supporting evidence, and advisor notes and review decisions. Some inferences may concern possible cognitive changes or financial exploitation; they are not a medical diagnosis.
- Trusted contacts and communications: contact details and relationship information you or your advisor provide, plus messages sent to support. Provide another person's information only when you have permission to do so.
- Technical and usage information: IP addresses, browser and device information, request identifiers, access and security logs, provider events, and limited website and onboarding activity where analytics is enabled.
Information may come from you, your advisor or firm, connected financial institutions through Plaid, credit-report providers, and your interactions with our services. Bank sign-in is handled through Plaid or your institution, not a Vigilare bank-password form. Vigilare receives connection tokens rather than your bank login credentials.
2. How we use information
We use information to create and secure accounts, verify sign-ins, record consent, connect and synchronize financial accounts, display financial summaries, and support monitoring and advisor review. We also use it to deliver service emails, respond to support requests, troubleshoot problems, protect against misuse, and maintain records of important actions.
Automated rules and scoring help identify activity that may deserve attention. Findings can be incomplete or incorrect and require appropriate review. Vigilare does not use these findings to transfer funds or trade on your behalf.
We use limited website and onboarding analytics to understand and improve the website and signup experience.
4. Cookies and analytics
We use browser storage for sign-in sessions and preferences. Our Plausible integration does not set analytics cookies, store analytics identifiers in your browser, or track you across unrelated websites. It records public website and signup-page visits, Get Started clicks, and limited onboarding milestones such as completing a profile or connecting a first bank. It does not record page visits within your signed-in account.
Analytics events contain approved page labels, campaign labels, and limited event properties, not names, email addresses, Social Security numbers, client identifiers, bank details, balances, or transactions. As with other network requests, Plausible receives technical information such as your IP address and browser information; it uses these to derive statistics without storing raw IP addresses or a persistent visitor identifier. See Plausible's Data Policy.
Our analytics respects a browser's Do Not Track setting where it is available. Blocking analytics does not prevent you from using Vigilare. Our website also loads fonts from Google Fonts; those requests can disclose technical information such as your IP address separately from analytics.
5. Your choices and requests
You can choose whether to connect financial accounts and which accounts to authorize through Plaid. Where available in your account, sharing settings control advisor visibility, while disconnecting an institution or withdrawing monitoring consent stops future collection or monitoring as applicable. An institution-level disconnect applies to all accounts connected through that institution connection.
If a control is unavailable, or you need help accessing, correcting, or deleting information, contact [email protected]. We may need to verify your identity and authority before acting on a request. Do not email passwords, full Social Security numbers, or bank credentials.
Depending on where you live and which laws apply, you may have rights to access, correct, delete, or obtain a copy of information, or to limit certain processing. Available rights and exceptions depend on the information and circumstances. Contact us to make a request or ask about a response. Plaid and your financial institution may also provide their own data and connection controls.
6. Retention and deletion
Disconnecting a bank or withdrawing consent is different from deleting your Vigilare account. Bank disconnection removes synced account data through our cleanup process. If a provider is unavailable, revocation and cleanup may remain pending; we do not promise that every record is erased immediately or within a fixed number of hours.
Profile and login information, consent receipts, credit reports, evaluations, retained review decisions, and audit records may remain after monitoring stops. Some logs and historical records currently have no automatic expiration. We are reviewing retention periods before real-customer launch.
Account-deletion requests may be subject to legal, security, and recordkeeping requirements. Backup copies and provider-held information have separate retention and deletion processes. Removing a Vigilare connection does not necessarily delete information held independently by your bank, advisor, Plaid, or another provider.
7. Security
We use access controls, encrypted connections to the public service, and password hashing. We apply application-level encryption to selected fields containing personally identifiable information (PII), including client identity fields and Social Security numbers, as well as other sensitive data such as Plaid access tokens and credit-report artifacts. Not every database field is individually encrypted. No system or transmission method can be guaranteed completely secure.
Use a unique password and protect your email account, which is used for verification and account recovery. Contact us promptly if you suspect unauthorized access.
8. Children, processing locations, and updates
Vigilare is designed for adults, not children. Contact us if you believe a child has provided personal information so we can review and address it.
Our service providers may process information in the United States or other locations where they operate. This policy does not make a data-residency guarantee.
We may update this policy as our services and practices change. We will identify the updated date and provide additional notice where required.
9. Contact us
For privacy questions or requests, contact Vigilare Systems, Inc. at [email protected] with the subject "Privacy request." Please include enough information to identify your account without sending sensitive financial details.