At VagSis ("Company", "we", "our"), we place great importance on the privacy of your personal data. This Privacy Policy explains how data collected through the vagsis.net domain and the VagSis agent software is processed. It has been prepared in accordance with applicable data protection regulations.
1. Personal Data Collected
The following data may be collected when you use our service:
- Account information: Full name, corporate email address, company name.
- Agent data: Screenshots of monitored devices, working hours, active application logs. This data is accessible only to the relevant company administrator.
- Technical data: IP address, device information, browser type, session logs.
- Payment information: Payments are processed through a third-party payment provider; card details are not stored by us.
2. Purposes of Data Processing
- Providing the service and account management
- Technical support and troubleshooting
- Billing and subscription management
- Platform security and fraud prevention
- Fulfillment of legal obligations
Employee data collected by the agent is processed solely for the purpose of monitoring by the employing organization. In this context, the data controller is the relevant company.
3. Sharing with Third Parties
Your personal data is not shared with third parties except in the following circumstances:
- With your explicit consent
- Legal obligation or court order
- Infrastructure providers essential to operating the service (cloud storage, email system) — these providers are bound by confidentiality agreements
4. Data Retention Periods
- Screen recordings: 30–90 days depending on your subscription plan. Deleted within 30 days of account closure.
- Account information: For the duration the account is active plus any applicable legal retention obligation.
- System logs: 90 days.
5. Security Measures
The following technical measures are applied to protect your data:
- TLS 1.3 encryption for agent–server communication
- AES-256 encryption for stored data
- Regular security audits and vulnerability scans
- Role-based access control — only authorized personnel can access data
6. User Rights (GDPR / KVKK)
Under applicable data protection law, you have the following rights:
- The right to know whether your personal data is being processed
- The right to request information if it is being processed
- The right to request correction of inaccurate or incomplete data
- The right to request deletion where conditions are met
- The right to restrict processing or to object
- Data portability
To exercise these rights, you can write to privacy@vagsis.net.
7. Cookies
vagsis.net uses only essential session cookies. No third-party analytics or advertising cookies are used.
8. Contact
For questions about this privacy policy:
Email: privacy@vagsis.net
This policy may be updated from time to time. Significant changes will be notified by email.