1. Who we are
Vigía 24/7 is an access control system for residential communities, buildings and other facilities, developed and operated by PRGTEC SpA.
| Company details | |
|---|---|
| Legal name | PRGTEC SpA |
| Tax ID (RUT) | 76.097.524-9 |
| Business address | Av. Apoquindo 6410, Office 212, Las Condes, Santiago, Chile |
| Legal representative | Arturo Mina Molina |
| Contact | contacto@prgtec.com · contacto@vigia247.com |
Each community or organization that subscribes to Vigía 24/7 (the "Client") decides which data it records and how it uses that data for its access control: it is the controller of that data. PRGTEC SpA processes it on behalf of the Client, only to provide the service and according to the Client's instructions.
This policy is governed by Chilean Law No. 19,628 on the Protection of Private Life and, from its entry into force, by Chilean Law No. 21,719 on the protection and processing of personal data.
2. What data we process
| Whose | Data |
|---|---|
| Residents, managers and staff (users) | First and last name, national ID number (RUT), email, mobile number, unit, role, username and password (stored hashed, never in plain text), and a log of app sign-ins. |
| Guests | Name, national ID number, license plate (optional), party size, unit visited, reason for the visit, date and time of entry and exit, and a photo of the vehicle when the community uses this feature. |
| People who fill in the Registration Form | Unit, user type and relationship to the main resident, first and last name, national ID number, email, mobile number, requested username, whether they want Alexa announcements, the frequent visitors they authorize (name, national ID number, activity, license plate and mobile number, all optional except the name and activity), their consent to the processing of their data and the IP address from which the form was sent. |
| Guests who complete an invitation | The same data as in the previous row, entered by the guests themselves from the link sent by the resident. |
| The Client's management and committee | Name and email, to send invoices and notices of payment and service suspension. |
| People who contact us through this website | Name, email, mobile number, name of the community and the message. |
| People who request to subscribe | Legal name and national ID number of the community, address of the premises, name and national ID number of its representative, email, mobile number, acceptance of the Terms and of this policy (version, date and time) and the IP address from which the request was sent. |
| All app users | Technical security data: IP address, browser or device, and date and time of sign-ins, license use and access key validation. This data protects accounts and provides an audit trail. |
Entry and exit photos: when the community uses them, they are kept only for the number of days set by its management (20 days by default) and are then deleted automatically.
Registration Form: its data is used only so the Client's management can review it and create the user. The person receives a PDF copy by email; Vigía 24/7 does not keep the form: it is deleted as soon as the user has been created, when the management rejects it, after 48 hours if the email address is not confirmed, or after 30 days if the process is not completed.
Guest QR codes and invitations: the guest data they contain (name, national ID number, license plate and mobile number) is deleted automatically once the retention period set for the Client has passed (90 days by default) since the QR code or invitation ended: it expired, was used or was cancelled. Permanent QR codes are kept while they are active.
ID cards: when an ID card is scanned, the app reads the ID number and name to compare them with the QR code and the community's records. The image of the ID card is not stored; only the ID number and name are saved in the entry log.
3. What we use it for
- Recording and controlling entries to and exits from the premises.
- Creating and validating guest QR codes and invitations.
- Notifying residents when their guest arrives (in the app, by push notification and, if they sign up for it, through Alexa).
- Detecting and recording security incidents, for example an ID number presented under another name or a cancelled QR code.
- Providing the Client's management with reports and histories.
- Invoicing the Client for the service and sending its management and committee notices of invoicing, payment and suspension.
- Providing technical support and answering contact requests.
We do not sell or rent personal data, we do not use it for advertising and we do not build commercial profiles.
4. Who can see the data
- Each resident sees only the visits and incidents of their own unit.
- The Client's management and front gate staff see what they need for their role, according to the permissions set by the Client.
- The app does not show a resident other people's data: for example, when an ID number is validated, it does not reveal the name it is registered under.
- PRGTEC SpA staff, only for support and maintenance, under a duty of confidentiality.
5. Third-party services
| Service | Purpose |
|---|---|
| Hostinger | Hosting of the website, the app and the database. |
| Browser notification services (Google, Apple, Mozilla) | Delivering notifications to users' phones. |
| Amazon Alexa and Amazon Web Services | Only if the resident signs up for and links Alexa: the text of the announcement (the resident's and the guest's names) is sent to Amazon so their Echo can say it. |
| Residents share QR codes and invitations from their own WhatsApp. Vigía 24/7 does not access their conversations. |
Some of these providers may have servers outside Chile. We require them to process the data only to provide their service.
6. How long we keep it
Data is kept while the Client's service is active and according to the retention periods it configures: entry and exit photos, 20 days by default, and guest data in QR codes and invitations, 90 days by default after they ended. Entry and exit records are kept as the history and audit trail of the premises for as long as the service lasts. A user who already has recorded activity is deactivated instead of deleted, to preserve the history and audit trail of the premises; it is only deleted with the Client's written authorization. When the service ends, the Client may request a copy of its data during the following 30 days; after that period, the data is deleted within the following 60 days, except for data the law requires us to keep (for example, invoicing data). Messages from the contact form are kept for as long as the business conversation lasts.
7. How we protect it
- All communication is encrypted (HTTPS).
- Passwords are stored using secure hashing functions, never in plain text.
- Alexa access credentials are stored encrypted.
- Each Client's data is kept separate from the others.
- Incident logs and audit logs cannot be edited.
Security incidents: if an incident affecting personal data occurs, we will notify the Client without delay with the information available and, when required by law, the authority and the affected individuals.
8. Your rights
You may request access to your data, its correction if it is inaccurate, its deletion or the restriction of its processing, and you may object to it; and, once Law No. 21,719 is in force, its portability. Since the data belongs to each community, the fastest way is to ask your community's management. You can also write to us at contacto@vigia247.com and we will forward your request to the Client.
9. Cookies and local storage
This website does not use advertising or tracking cookies. The app stores data on the device itself (local storage) so it can work offline and keep you signed in.
10. Changes to this policy
We may update this policy. We will publish the new version on this page with its date, and notify Clients of any important changes.
This is an English translation provided for convenience. In case of any discrepancy, the Spanish version prevails.