Terms of Service

Vigil is two things, and the distinction matters throughout this document:

• —Vigil — the dashboard at vigil.wtf. Your account, your telemetry, your settings.
• —Vigil Proxy — the service at api.vigil.wtf. It sits in the path of your AI API calls, records metadata about each one, optionally adds cache markers to reduce your provider bill, and forwards the request to the provider you chose.

By creating an account or routing traffic through the proxy, you accept these terms.

You need an account to use Vigil. You are responsible for what happens under it and for keeping your API keys secret. Keys are shown once at creation and we store only a SHA-256 digest — we cannot recover one for you, so if you lose a key, revoke it and mint another.

You must be at least 16, and if you are using Vigil for an organisation you must be authorised to accept these terms on its behalf.

Tell us at sam@vigil.wtf if you believe your account or a key has been compromised.

Do not use Vigil to:

• —Break the law, or help anyone else break it.
• —Violate the terms of the AI provider you are routing to. Their rules still apply to traffic that passes through us.
• —Route traffic you have no right to route, or personal data you have no lawful basis to process.
• —Attack, overload, or attempt to gain unauthorised access to our infrastructure — or use Vigil to do that to anyone else.
• —Resell Vigil as your own product without a written agreement with us.
• —Circumvent plan limits, including by spreading one workload across multiple accounts.

If you breach this section we may suspend or close your account. Where the breach is not serious and can be fixed, we will tell you and give you a reasonable chance to fix it first.

Monitoring is not the metered part. On every plan, including Free, you can see all of your agents — cost, latency, errors, and a measured figure for what caching would save. What a paid plan buys is permission to switch optimisation on, and how much spend it may work against.

The metered unit

“Optimised spend” is the monthly AI spend we actively work on — not how much you log, and not how much you spend in total. Logging calls we never touch costs you nothing extra. A second, separate ceiling limits how many calls we record at all.

Where a plan carries an overage rate, exceeding the logged-call ceiling is billed at that rate rather than cutting you off — consistent with section 5. Where a plan shows no overage, the ceiling simply stops additional logging.

Retention is covered by the Privacy Policy, which describes what currently happens rather than what the table above intends. Read it before relying on a window.

Payments are processed by Stripe. Card details go to Stripe directly and never reach our servers.

Auto-renewal

Paid plans renew automatically each month until you cancel. The next renewal date and the amount are shown on your billing page for as long as the subscription is active, and you can cancel there at any time before it.

Renewal notices and receipts are sent by Stripe, where its settings provide for them. We do not send them ourselves and we do not control their timing, so treat your billing page — not an email — as the record of when you will next be charged.

If we change the price, we will tell you at least 30 days beforehand, and the change applies from your next renewal, never the current period. You can cancel before it takes effect.

Cancel any time from Settings → Billing. Your plan stays active until the end of the period you have already paid for, and you are not charged again. You can resubscribe later.

Cancelling does not return the payment you have already made. Where we do return it, access still runs to the same date — see section 9.

Cancelling a plan does not delete your account or your data. If you want your data erased as well, use Settings → Delete account. It is immediate and irreversible; the Privacy Policy lists the records that outlive it.

If Vigil did not do what this page says it does, tell us and we will refund you. We would rather return the money than argue about a beta product.

What a refund does to your access

A refund is a cancellation with the payment returned, and it behaves like one in every other respect. We return what you paid for the current period, your plan stays active until the end of that period, and you are not charged again. On that date access ends and your account moves to Free. We do not cut you off on the day the money goes back: you keep the period you had already paid for, and you keep it for nothing.

Nothing is pro-rated in either direction. We do not bill you for the days you used before the refund, and the refund does not lengthen or shorten the period. Your billing page shows the date access ends and says that the payment has been returned — that page is the record, as it is for renewal.

The money goes back through Stripe, to the card or other method you paid with. How long it then takes to appear is your bank's timing rather than ours, and we cannot speed it up.

Beyond that we do not offer pro-rata refunds for a partly used month. Cancelling gets you the same access on the same dates — section 8 — without the payment coming back. There is one pro-rated refund elsewhere in these terms: if you object to a new sub-processor and we cannot find an alternative, section 6 of the Data Processing Addendum lets you terminate and be refunded the prepaid unused period. That clause governs that situation; this section governs the rest.

How this sits with the 14-day right of withdrawal

Nothing else in this section removes a statutory right you have as a consumer.

What we store, what we never store, and how long we keep it is set out in the Privacy Policy. The Article 28 terms covering traffic you route through the proxy are in the Data Processing Addendum, which forms part of these terms and applies automatically — you do not need to sign anything.

In short: your prompts and the model's responses are not stored. We record metadata about each call, plus your tool names and a short timestamp excerpt where one is detected, both explained in the Privacy Policy.

You decide what traffic goes through the proxy. If it carries personal data belonging to your own users, you are the controller of it and responsible for having a lawful basis and for telling those people what they are owed.

We own Vigil — the software, the dashboard and the brand. You own your data and your prompts; nothing in these terms transfers any of it to us, and we do not use your prompts, responses or telemetry to train any model.

Your subscription is a licence to use the service, not a sale of any part of it. If you send us feedback we may act on it without owing you anything for it. Scores you post to /v1/feedback are not feedback in this sense: they are part of your call history, handled as the Privacy Policy and the Data Processing Addendum describe.

Vigil is provided as-is. To the fullest extent the law allows, we exclude implied warranties of merchantability, fitness for a particular purpose and non-infringement.

Our total liability to you is capped at the amount you paid us in the twelve months before the claim. On the Free plan, that amount is zero. We are not liable for indirect or consequential loss, lost profits, lost data, or the cost of your AI provider bill — including a bill higher than you expected because optimisation did not apply, or because a projection in the dashboard did not materialise.

You can stop using Vigil at any time — cancel your plan, delete your data, or delete your account.

We may suspend or close your account if you breach section 4, if your payment fails and is not resolved, or if we are legally required to. Except where the breach is serious or we have no choice, we will tell you first and give you a chance to put it right.

If we discontinue Vigil entirely, we will give you at least 30 days' notice, stop charging you, and leave the export in Settings working so you can take your data with you.

We may update these terms. For a material change that reduces what you get, we will give at least 30 days' notice and the change applies from your next renewal — so you can cancel first. For a clarification or a change in your favour, the updated page takes effect when it is published. The date at the top always reflects the last change to these terms, or to the Data Processing Addendum that forms part of them.

These terms are governed by the law of the Netherlands, where Evolmet B.V. is established, and the courts of The Hague have jurisdiction over any dispute arising out of them. The UN Convention on Contracts for the International Sale of Goods does not apply.

If a clause in these terms turns out to be unenforceable, the rest continues to apply.

Questions about any of this: sam@vigil.wtf.