Skip to content

Privacy Policy

Updated on October 26, 2026.

This policy explains which personal data Vigioo Sign and this website process, why, who we share it with, how long we keep it and how you can exercise your rights.

1. Who we are and our role

  • Vigioo Tecnologia Ltda, CNPJ 55.755.126/0001-68, is the controller of the data of people who visit this site, request a subscription or contact us, and of people who have a Vigioo Sign account.
  • For the documents and signer data a customer sends through Vigioo Sign, the customer decides what to use them for, and Vigioo processes them on the customer's behalf (as processor), only to provide the service.
  • If you got an invite to sign, the customer who sent it decided to send the document: for questions about the content of the document, talk to them.

2. Words we use

  • "Personal data": information tied to a person, such as name, email, phone, CPF or IP address.
  • "Data subject": the person the data refers to.
  • "Process": anything done with data (collect, store, use, share, delete).

3. Which data we process and why

  • Website visitors: the theme and language chosen and the cookie choice, stored only in your browser; the IP address, used when a form is submitted to limit abuse and not stored by us.
  • People who request a subscription: name, email, WhatsApp, company, CPF or CNPJ (optional), the tier and billing period chosen and the record of consent. We use it to answer and complete the subscription (legal basis: pre-contractual steps and consent).
  • People who contact us: name, email, WhatsApp, company (optional) and the message, to answer (consent).
  • Customers with an account: account registration and usage data, users, API tokens, billing and envelope history, to provide the service, charge and give support (performance of a contract).
  • Signers: name, email and, when the customer provides them, phone and CPF; the confirmation code sent by email; and, at the time of signing, IP address, device and browser data (system, language, time zone, resolution, device identifier), estimated location, the visual signature and the acceptances. We use it to identify, record and prove the signature and build the audit trail (performance of a contract, regular exercise of rights and legitimate interest in security and fraud prevention).
  • Security and operation: access and error logs, to protect the Platform and fix problems (legitimate interest and legal duty to keep logs).
  • We do not sell personal data and do not use it for third-party advertising. The service is not aimed at people under 18; if you are responsible for a minor who sent us data, talk to us so we can delete it.

4. Cookies

  • We only use what the site needs to work: the theme, the language and your cookie choice, stored in your browser.
  • Usage measurement only with your consent, and today the site does no measurement. You can change your choice at any time through the "Cookies" link in the footer.
  • The Vigioo Sign screens used for signing and for logging in use what is needed to keep the session and protect access.

5. Who we share it with

  • Service hosting: Vigioo Sign runs on Hostinger servers in São Paulo (Brazil). The public site (this page) and the function that receives the form run on Vercel, in the São Paulo region.
  • Email: invites, codes and reminders go out through an email delivery service (SMTP).
  • Artificial intelligence: if the signer chooses to create the signature with AI, their name is sent to OpenAI to generate the image. No other data is sent.
  • The customer who sent the document receives the signer's data and that document's audit trail.
  • Authorities, when required by law or to defend Vigioo in a legal case.
  • Anyone can see, on the public verification page, whether a code or PDF matches a signed document.

6. Transfers outside Brazil

  • Vigioo Sign and form data stay on servers in Brazil. The use of OpenAI (only for the AI signature) and possible email and support services of our providers may involve processing outside Brazil; in those cases we require protection from providers that is compatible with the LGPD.

7. How long we keep it

  • Subscription requests and messages: for the length of the commercial conversation and, if it becomes a contract, while it lasts and for the periods the law requires.
  • Documents, final PDFs and audit trails: while the customer's account is active, because they are the proof of the signature. After cancellation, the customer may ask for deletion; we may keep what the law requires or what is needed to defend ourselves in a dispute.
  • After that, the data is deleted or anonymized.

8. How we protect it

  • Protected connection (HTTPS) on the site and on Vigioo Sign; dashboard access with a password and, when enabled, a second factor; revocable API tokens; a confirmation code with short validity and a limited number of attempts.
  • Each signed PDF gets a digital fingerprint (SHA-256), so any change after signing is detected at verification.
  • Internal server folders are not served over the internet, and form submissions have bot protection and an attempt limit.
  • No system is fully immune. If there is an incident that may cause relevant harm, we will notify those affected and the ANPD, as the law requires. Your part: keep your passwords and tokens safe.

9. Your rights

  • Under the LGPD (art. 18), you may request: confirmation that we process your data, access, correction, anonymization, blocking or deletion, portability, information about who we share it with, information about the possibility of not consenting and its consequences, and withdrawal of consent.
  • Some data cannot be deleted right away because the law requires keeping it or because it is the proof of someone else's signature; we will explain when that is the case.
  • If you are a signer, you can also ask the customer who sent the document.
  • To exercise your rights, use the "Talk to us" button on the site. You may also file a complaint with the Brazilian Data Protection Authority (ANPD).

10. Talk to us

  • Contact for privacy and data subject requests: the "Talk to us" button on this site. Identify yourself and say what you want; we may ask for a detail to confirm it is you.
  • Controller: Vigioo Tecnologia Ltda, CNPJ 55.755.126/0001-68.

11. Changes to this policy

  • We may update this policy. The current version is published on this page, with the date of the last update, and important changes will be announced.

Back to home