VigiWork
ES

VigiWork · JP Company

Privacy and data policy

Last updated September 21, 2026

VigiWork is employee supervision software built by JP Company. This policy explains plainly what information we process, what for, where it lives and what you can demand from us. It is written to be understood both by the administrator who buys the service and by the employee who uses it every day.

The headline: VigiWork does not take photographs and does not record video or audio as evidence. The camera is used to check, on the employee’s own device, that the person at the screen is the expected one, and only a text record of that check is kept.

1. Who is responsible for your data

  • The controller of each team’s data is the company that hires VigiWork: it decides who is supervised, under what rules and for how long.
  • JP Company (Colombia), through VigiWork, acts as a processor: it processes data following that company’s instructions and its own commercial relationship with it.
  • Contact for any data matter: infovigiwork@gmail.com.

2. What data we process

  • Account: name, email, phone, company name and tax ID, job title and work arrangement.
  • Work sessions: start and end times, focus time, breaks, away-from-screen events, camera interruptions and supervisor call-outs.
  • Identity verification: a face descriptor, a list of numbers derived from the face. It is not a photograph and the face cannot be rebuilt from it. It is computed in the employee’s browser and used to confirm it is still the same person.
  • Communication: internal chat messages and, in meetings, the text transcript of what is said.
  • Technical: application errors, connection timestamps and a hashed summary of the IP address to curb abuse of public forms.
  • Billing: plan, payments made and contact details for invoicing.

3. What we never do

  • We never take or store photographs of employees as evidence of anything.
  • We never record video or audio of work sessions or meetings. A meeting leaves only the text of the transcript and the chat.
  • We do not read your files, emails or screens outside the application.
  • We do not sell, rent or share data with third parties for commercial or advertising purposes.
  • We do not use one company’s data to train models or to benefit another company.

4. What we use each item for

  • Running the service: the administrator’s dashboard, the management reports and the chat.
  • Verifying the identity of the person working, so that supervision means something.
  • Emailing about relevant account events: end of trial, plan expiry, a new employee, cancellation or deletion.
  • Charging for the service and keeping our books.
  • Keeping things secure: detecting abuse, logging errors and blocking automated use of forms.

5. Where it is stored and who can see it

  • Data is hosted on Google Cloud / Firebase, in United States data centers (us-east1 region), encrypted in transit and at rest.
  • Access rules are enforced by the system itself: each company only sees its own data. An administrator cannot read another company’s data, and an employee sees only their own.
  • The JP Company team accesses identifiable data only when needed for support or to meet a legal obligation, and that access is logged.
  • Emails are sent through delivery providers (EmailJS and, going forward, Resend). For booked meetings, the calendar event is created by Google using the VigiWork account.

6. Video calls and meetings

  • Video and sound travel directly between participants’ browsers. They do not pass through our servers and are not stored.
  • The transcript is produced by each browser from its own user’s microphone: the audio never leaves that device, only the resulting text.
  • When the meeting ends, minutes are assembled from that transcript and the chat, stored with the meeting and emailed to the VigiWork mailbox.
  • Virtual backgrounds are computed on each participant’s device; the image is not sent anywhere for processing.

7. How long we keep it

  • Session history keeps the last 90 work sessions per person.
  • Account data is kept while the service is active.
  • Deleting an account erases the profile, the employee records and the credentials. An administrative record of the closure (company identification, reason and payments) is kept for accounting obligations and to handle claims.
  • Billing records are kept for as long as Colombian law requires.

8. Your rights

  • You may access, update, correct and delete your data, and withdraw consent where applicable.
  • Employees should exercise these rights first with their employer, who decides on supervision. If there is no answer, they can write to us directly.
  • Administrators can download reports and, from My profile → Subscription and account, cancel the subscription or delete the account without calling anyone or waiting for approval.
  • Write to infovigiwork@gmail.com: we answer within 15 business days.
  • In Colombia you may also turn to the Superintendencia de Industria y Comercio.

9. Employee consent

  • Before supervision starts, the employee is shown on screen what is recorded and what is not, and must accept it explicitly. That acceptance is stored with its date and version.
  • The company hiring the service undertakes to inform its team and to supervise only during working hours and for a legitimate work purpose.

10. Cookies and browser storage

  • This website uses no advertising or analytics cookies and no third-party tracking tools.
  • The application stores the minimum in your browser: your session, the language and a few screen preferences. That lives on your device and is cleared when you log out or clear browser data.

11. Changes to this policy

  • If anything relevant changes, we update the date on this page and email active accounts.