Privacy Policy

1. Introduction

SKY LOOK LLC, the company that owns and operates alwaysvigil.com ("AlwaysVigil," "we," "our," or "us"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our automated check-in service ("Service"). Please read this policy carefully. By using AlwaysVigil, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

When you register for an account, we collect:

• Email address
• Full name (optional)
• Password (stored in encrypted/hashed form)
• Timezone preference
• Check-in frequency preferences

2.2 Recipient Information

When you add recipients to your account, we collect:

• Recipient email addresses
• Recipient names
• Relationship to you (optional)

2.3 Message Content

We store the messages you create to be sent to your recipients. This content is only accessed when necessary to deliver notifications.

2.4 Usage Data

We automatically collect certain information when you use the Service, including:

• IP address
• Browser type and version
• Check-in response timestamps
• Login activity

3. How We Use Your Information

We use your information for the following purposes:

• Service Delivery: To send check-in reminders and process your responses
• Recipient Notifications: To send your prepared messages to designated recipients when triggered
• Account Management: To maintain your account and subscription
• Communication: To send service-related emails (welcome emails, reminders, alerts)
• Security: To detect and prevent fraud, abuse, and security incidents
• Improvement: To analyze usage patterns and improve our Service

4. Data Storage and Security

We implement industry-standard security measures to protect your data:

• Encryption in Transit: All data is encrypted using TLS/HTTPS (minimum TLS 1.2)
• Encryption at Rest: Sensitive data (messages, recipient emails, personal information) is encrypted in our database
• Password Security: Passwords are hashed using bcrypt with strong salting and never stored in plain text
• Access Controls: Access to production systems is strictly controlled, logged, and requires multi-factor authentication
• Security Headers: We implement CSP, X-Frame-Options, X-Content-Type-Options, and other protective headers
• Rate Limiting: Brute force protection on authentication endpoints
• Regular Audits: Security audits, vulnerability scanning, and penetration testing
• Database Backups: Daily encrypted backups with secure storage

⚠️ Important: While we implement strong security measures, no system is 100% secure. We cannot guarantee absolute protection against all threats.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Recipients: Your messages and specified information will be shared with your designated recipients only when your check-in grace period expires
• Service Providers: We may share data with third-party services that help us operate our Service
• Legal Requirements: We may disclose information if required by law, court order, or government request
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred with the same encryption standards

6. Data Retention

We retain your data for as long as your account is active or as needed to provide you with our Service. Upon account deletion:

• All personal data, messages, and recipient information will be permanently deleted within 30 days
• Backup copies may persist for up to 90 days before being purged
• Anonymized, aggregated data may be retained for analytics purposes

7. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and all associated data
• Export: Request a portable copy of your data
• Objection: Object to certain processing of your data

To exercise these rights, please contact us at [email protected] or use the account settings in your dashboard.

8. Cookies and Tracking

We use essential cookies to maintain your session and remember your preferences. We do not use third-party tracking cookies or sell data to advertisers. Authentication tokens are stored securely in your browser's local storage.

9. Children's Privacy

AlwaysVigil is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

10. GDPR & CCPA Compliance

For users in the European Union (GDPR) and California (CCPA), you have additional rights including: access, rectification, erasure, restriction, portability, and the right to object to processing. To exercise these rights, contact us at [email protected].

11. Third-Party Services

We use Gmail API (Google) for email, Stripe/PayPal for payments, and Cloudflare for hosting. These third parties have access to your data only to perform services on our behalf. We do NOT sell your data to advertisers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or by posting a notice on our website.

13. Contact Us

If you have questions about this Privacy Policy, please contact us at:

Company: SKY LOOK LLC
Website: alwaysvigil.com
Email: [email protected]
Support: [email protected]