Privacy & cookies

Vigil is a Cyber Resilience Act reporting-readiness documentation service operated by Kynth Studio. This Privacy & Cookies Policy explains what we collect when you use vigil.kynth.studio and our service, how we use it, and the choices you have.

1. Information We Collect

We may collect the following types of information:

Details you give us — your name, email, company, product details, and repository URLs when you buy a pack or use the free tools, plus any messages you send us.

Payment information, processed by Stripe — we never see or store your full card number, only a confirmation and the last four digits.

Public sources — your product pages and the public repositories you point us at, which we read to prepare your pack and generate SBOMs.

Basic usage data collected through analytics to keep the site working and improve it.

2. How We Use Your Information

We use the information we collect only to deliver the service you paid for and to support you:

Prepare your scope memo, disclosure policy, handling SOP, SBOM, and reporting runbook.

Generate SBOMs from the repositories you submit.

Email you your pack, any scope memo you request, and answers to your questions.

3. Sharing Your Information

We do not sell your personal information. We use trusted service providers — Stripe for payments and Supabase for secure data storage — who process data on our behalf. We may disclose information where required by law.

4. Cookies

We use a small number of cookies: essential ones that make checkout and the site work, and analytics cookies that help us understand usage. You can manage or disable cookies through your browser settings, although some features may not function correctly as a result.

5. Data Retention & Security

We keep your information for as long as needed to deliver your pack and support you — on the retainer tier, for the length of your 12-month support window — then only as long as the law requires. We protect it with encryption in transit and access controls, and we work only with reputable processors. No method of online transmission or storage is entirely secure.

6. Your Rights

You have the right to request access to, correction of, or deletion of your personal information. To exercise these rights, please contact us at <a href="mailto:hello@kynth.studio">hello@kynth.studio</a>, and we will respond promptly.

7. Updates to This Policy

We may update this Privacy & Cookies Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be published on this page with a revised effective date.