Vijilan Partner Portal — Privacy Policy

This Privacy Policy describes how Vijilan Security, LLC processes personal information in connection with the Vijilan Partner Portal (portal.vijilan.io). It supplements the Vijilan privacy policy at vijilan.com. For security-monitoring data processed in delivering subscribed services, the MSA and Data Processing Agreement govern.

Account data: name, business email, phone, company, role, authentication data (including MFA enrollment).

Usage data: log-ins, pages and features used, audit-log events, device and browser information.

Business data you enter: clients, subscriptions, inventory, engagement and campaign records.

Prospect data collected through partner campaign pages and assessments: name, business contact details, company, assessment responses. For this data the partner (MSP, VAR, or vCISO) is the controller and Vijilan processes it on the partner's behalf as a service provider/processor.

Documents and signatures: legal documents generated and executed through our e-signature provider.

Training records: Academy enrollment, progress, quiz results, and certifications.

To provide, secure, and operate the Portal, including authentication, role enforcement, and audit logging.

To process orders, subscriptions, billing, and legal document execution.

To provide training, enablement, and campaign features, and to show partners their own campaign performance and leads.

To communicate service information; marketing communications only with consent or as permitted by law.

To comply with legal obligations and enforce agreements.

Vijilan does not sell personal information. We share it with: service providers under contract (including cloud hosting, database/authentication infrastructure, e-signature, payment processing, and communications providers); your own organization's administrators; channel parties where you direct it (e.g., a distributor with hierarchy visibility you are part of); and authorities where required by law. Subprocessor list available on request: [LINK].

Safeguards include encryption in transit and at rest, role-based access control enforced server-side, multi-factor authentication, and append-only audit logging, operated under Vijilan's SOC 2 Type II and ISO 27001 programs. Account data is retained for the life of the account plus [X] years; audit and executed-document records per contractual and legal retention requirements; campaign/prospect data per the controlling partner's instructions.

Depending on your location (including under GDPR, UK DPA, CCPA/FIPA, PIPEDA, and the Australian Privacy Act), you may have rights of access, portability, correction, deletion, and objection. Submit requests to privacy@vijilan.com. Where Vijilan processes prospect data on behalf of a partner, we will route or support the request with the controlling partner. We do not knowingly collect information from individuals under 18.

Vijilan is based in the United States and information may be transferred to, stored, and processed in the United States. We will notify Portal users of material changes to this policy. Contact: privacy@vijilan.com, Vijilan Security, LLC, 1010 S Federal Hwy, Suite 1400, Hallandale Beach, FL 33009.