Privacy Policy
Vouch ("Vouch", "we", "us", "our") operates the Vouch platform. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights in relation to it.
If you have questions, contact us at hello@vouchbusiness.com.
1. Who We Are
Data controller: Vouch, Ireland. For full details of your rights under GDPR, see our GDPR Rights page.
2. What Data We Collect
| Category | Examples | Source |
|---|---|---|
| Account data | Email address, name, password (hashed) | You, when registering |
| Campaign data | Campaign name, company name, question prompts | You, when creating campaigns |
| Testimonial content | Video recordings, audio, transcripts, star ratings, written answers | Clients, via the recording link |
| Invite data | Client name, client email address, invite status timestamps | You, when sending invites |
| Usage data | Pages visited, feature interactions, browser and device type | Automatically via Firebase Analytics |
| Payment data | Billing email, subscription tier (payment card details held by payment processor, not us) | You, at checkout |
3. How We Use Your Data
- Providing the Service — storing and displaying your campaigns and testimonials, sending invite emails.
- AI processing — video transcription and quote generation via the Anthropic Claude API. Audio is processed transiently and not stored by Anthropic beyond the API request.
- Email delivery — invite and notification emails sent via Resend.
- Product improvement — aggregated, anonymised analytics to improve features.
- Legal compliance — retaining records where required by law.
4. Legal Bases for Processing (GDPR)
- Contract — processing necessary to provide the Service you have subscribed to.
- Legitimate interests — security, fraud prevention, service improvement.
- Consent — marketing emails (you may unsubscribe at any time); non-essential cookies (see Section 8).
- Legal obligation — retaining certain records as required by law.
5. Third-Party Processors
| Processor | Purpose | Location |
|---|---|---|
| Google Firebase | Authentication, database, file storage | EU (europe-west1 region) |
| Anthropic | AI transcription and quote generation | USA (Standard Contractual Clauses) |
| Resend | Transactional email delivery | USA (Standard Contractual Clauses) |
Each processor is bound by a data processing agreement and may only process data as instructed by us.
6. Data Retention
- Account data (email, name) is retained for the life of your account plus 90 days after deletion.
- Testimonial videos are retained until you delete them or close your account, then removed within 90 days.
- Invite records are retained for 12 months after the invite was sent.
- Usage logs are retained for 90 days.
7. Your Rights
If you are located in the EEA or UK, you have the following rights under GDPR:
- Right of access — obtain a copy of your personal data.
- Right to rectification — correct inaccurate or incomplete data.
- Right to erasure — request deletion of your data ("right to be forgotten").
- Right to restriction — restrict processing in certain circumstances.
- Right to data portability — receive your data in a structured, machine-readable format.
- Right to object — object to processing based on legitimate interests.
- Right to withdraw consent — where processing is based on consent, withdraw it at any time.
To exercise any of these rights, use our GDPR Rights form or email hello@vouchbusiness.com. We will respond within 30 days.
8. Cookies
We use the following cookies:
| Cookie | Purpose | Duration |
|---|---|---|
| Firebase Auth session | Keeps you signed in | Session / 1 year |
| vouch_cookie_consent | Remembers your cookie preference | 1 year |
We do not use third-party advertising or tracking cookies.
9. Children
The Service is not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
10. Changes to This Policy
We may update this policy from time to time. We will notify you by email and by a notice in the dashboard at least 14 days before material changes take effect.
11. Contact & Complaints
For privacy enquiries: hello@vouchbusiness.com.
If you are in the EEA or UK and are not satisfied with our response, you have the right to lodge a complaint with your local supervisory authority. In Ireland, this is the Data Protection Commission at dataprotection.ie.