⚠️ Version 1.0: this policy covers the Vigiloo website and parental control software in their current state. The section on the e-commerce module will be added when it launches (see section 11). In case of discrepancy, the French version prevails.
1. Identity of the data controller
The controller of the personal data collected through the vigiloo.ai website and the Vigiloo software is:
Vigiloo
11 Avenue du Val de Fontenay, 94120 Fontenay-sous-Bois, France
Email: contact@vigiloo.ai
Phone: +33 123 456 789
For any question about the protection of your data, you can also contact our data protection officer (DPO) at: contact@vigiloo.ai (subject: “GDPR – Request”).
2. Data collected and purposes
2.1 Browsing the website
When you visit vigiloo.ai, technical data is collected automatically:
- IP address and connection data
- Browser type, operating system, screen resolution
- Pages visited, visit duration, traffic source
- Analytics cookie identifiers (via Google Tag Manager)
Purpose: improving the website, audience measurement, fraud detection. Legal basis: legitimate interest (article 6.1.f GDPR) and consent for non-essential cookies.
2.2 Demo request form
When you fill in the demo request form, we collect:
- Last and first name
- Email address and phone number
- Age(s) of the children concerned
- Availability for the demo
- Any comments
- Consent to receive marketing information (opt-in)
Purpose: organising and delivering the demo of the Vigiloo software; sending information about our services if consent is given. Legal basis: pre-contractual measures (article 6.1.b) and consent (article 6.1.a) for marketing communications.
2.3 Guide download forms
To access our free guides, we collect: last name, first name, email address, phone number and explicit GDPR consent.
Purpose: sending the requested guide and, with consent, Vigiloo resources and news. Legal basis: consent (article 6.1.a).
2.4 Account creation and sign-in
When a Vigiloo parent account is created, we collect: last name, first name, email address, password (encrypted), and information about child profiles (first name, age, age group). Purpose: access to and management of the Vigiloo service. Legal basis: performance of the contract (article 6.1.b).
2.5 Use of the Vigiloo software
When the parental control software is used, Vigiloo processes, on behalf of the parent (user), data about the child’s digital activity:
- Activity on apps and social networks (usage time, platforms used)
- Detection of risky behaviour (bullying, inappropriate content)
- Real-time location data
- Activity indicators (calls, downloads, digital mood report)
This processing is carried out by contextual analysis algorithms in accordance with the AI Act (limited-risk AI system). The parent remains responsible for informing the child in line with Vigiloo’s recommendations. Legal basis: performance of the contract (article 6.1.b) and legitimate interest in protecting the minor (article 6.1.f).
2.6 Affiliate programme
If you take part in the Vigiloo affiliate programme, we collect your contact details, tracking identifiers and payment information (commission). Legal basis: performance of the contract (article 6.1.b).
3. Data relating to minors
Vigiloo is designed to help parents protect their minor children. Accordingly:
- The account holder is exclusively an adult parent or legal guardian.
- Vigiloo does not collect data directly from children; the parent activates monitoring on the child’s device.
- In accordance with article 8 GDPR, no Vigiloo service is offered directly to people under 15 without parental consent.
- Vigiloo strongly recommends that the parent inform the child that monitoring is in place, in a spirit of trust and transparency.
- Data about the child’s activity is only accessible to the parent holding the account and to the technical processors needed for the service. Vigiloo does not access the child’s personal messages or photos.
4. Retention period
We keep your data only as long as strictly necessary for the purposes for which it was collected:
- Browsing data and analytics cookies: 13 months maximum
- Demo request form (with no commercial follow-up): 3 years from the last contact
- Downloaded guides (mailing list): until consent is withdrawn + 3 years for evidence
- Active user account: duration of the subscription + 3 years after cancellation
- Child activity data: rolling 90 days (adjustable in the app)
- Technical logs: 12 months
After expiry, data is deleted or anonymised.
5. Recipients and processors
Vigiloo may share your data with the following categories of processors, strictly for the purposes described:
- Host of the website and application data (European Union)
- Google LLC (Google Tag Manager, Google Analytics): analytics
- Transactional and marketing email provider
- CRM / lead management tool (demo requests)
- Affiliate platform
Each processor is bound by a data processing agreement compliant with article 28 GDPR. Your data is neither sold nor rented to third parties.
6. Transfers outside the European Union
Some of our processors (notably Google LLC) may transfer data to third countries, particularly the United States. These transfers are governed by the European Commission’s standard contractual clauses and, where applicable, by the EU–US Data Privacy Framework.
7. Data security
Vigiloo implements appropriate technical and organisational measures to protect your data against unauthorised access, loss or alteration:
- Encryption of data in transit (HTTPS / TLS) and at rest
- Restricted access to data based on the principle of least privilege
- Logging and auditing of access to sensitive data
- Regular security testing
8. Your rights
Under the GDPR, you have the following rights over your data:
- Right of access (article 15): obtain a copy of your data
- Right to rectification (article 16): correct inaccurate data
- Right to erasure (article 17): delete your data under certain conditions
- Right to restriction of processing (article 18)
- Right to data portability (article 20)
- Right to object (article 21): in particular to direct marketing
- Right to withdraw your consent at any time, without affecting prior processing
To exercise your rights: contact@vigiloo.ai (subject: “GDPR – Exercise of rights”). We will reply within one month at most.
If you believe your rights are not being respected, you can lodge a complaint with the CNIL (French data protection authority): www.cnil.fr.
9. Cookies
The vigiloo.ai website uses cookies and trackers. For detailed information on the cookies used, their purpose and how consent is managed, please see our Cookie Policy available on the website.
10. Links to third-party websites
The Vigiloo website may contain links to third-party websites (social networks, partners). Vigiloo cannot be held responsible for the privacy practices of these websites. We encourage you to read their respective policies.
11. E-commerce module: coming soon (v2.0)
🚧 This section will be written in full and published when the Vigiloo e-commerce module launches. It will cover in particular: processing of payment data (bank details through a secure payment provider), order and billing management, accounting and tax obligations, and any basket and retargeting cookies. Users will be notified when the policy is updated to version 2.0.
12. Policy updates
Vigiloo reserves the right to amend this policy at any time to reflect changes to the service or to regulations. The current version is always available on vigiloo.ai. In the event of a substantial change, you will be informed by email or by a visible notice on the website.
Current version: 1.0, dated 11 June 2026
