Privacy by design.

We collect the minimum data needed to operate Vouch. Specifically:

• Account info: email address, password hash, role (brand or creator), and email-verification state.
• Profile data: handle, display name, bio, niches, location, and any avatar you upload (or the deterministic SVG initials we generate by default).
• Reviews: the structured 1-5 ratings you submit, optional free-text feedback, and the campaign each review is tied to.
• Audit logs: security-relevant events (login, password reset, role changes, admin actions). Used for moderation and compliance.
• IP addresses: retained briefly for rate limiting and abuse prevention. Not associated with reviews.

We use your data to operate the platform: render your profile, deliver reviews, send transactional email (verification, password reset, campaign notifications), and prevent abuse.

We publish aggregate platform numbers on /stats, total users, campaigns, reviews, average rating, but never per-user breakdowns. We never sell your data, share it with advertisers, or use it for anything outside Vouch's core function.

Anonymity is the bet-the-company feature of Vouch. We enforce it structurally, not contractually:

• Reviewer identity is locked at the database layer through Row-Level Security policies. Application code reading reviews never sees the reviewer's user ID.
• Aggregate scores are hidden until a profile crosses the k-anonymity threshold of 3+ published reviews. Below the threshold, even the reviewee can't see their score.
• Reviews lock for 7 days before publishing, so timing doesn't reveal the source. They release simultaneously after the lock window.
• Only Vouch admins (the founders) can see reviewer identity, and only for moderation. Admin views are audit-logged.

We retain active-account data for as long as your account is open. On account deletion, your reviewer identifier is replaced with an unrecoverable hash within 30 days; reviews you wrote stay visible (the aggregate would be inaccurate without them) but the link back to you is gone. Profile data and personal identifiers are purged on the same window.

Audit logs are retained for two years, then aggregated into monthly counts and the per-event records purged. IP addresses captured for rate limiting are dropped within 30 days.

We use a small set of established providers, each chosen for their security posture:

• Supabase: Postgres database and auth. Hosted in the United States.
• Vercel: application hosting and edge delivery.
• Resend: transactional email (verification, password reset, campaign notifications).
• Cloudflare Turnstile: bot protection at signup and other sensitive flows.
• Sentry and Better Stack: error monitoring and uptime checks. We scrub user identifiers from error reports.

None of these providers receive review content tied to reviewer identity. Reviews are stored in our database under our RLS policies; providers see only what they need to do their job.

Under GDPR, CCPA, and similar regimes, you have the right to:

• Access the personal data we hold about you.
• Correct any data that's inaccurate.
• Delete your account and associated personal data (subject to the anonymity-preserving review-retention rules above).
• Export your data in a machine-readable format (JSON, on request).

Self-serve access and deletion ship in Phase 4. Until then, contact us via privacy@vouchcollective.comand we'll handle requests within 30 days.

We use functional cookies for authentication (your login session) and a small number of preferences (e.g., your audience-toggle choice on marketing pages). No third-party advertising trackers, and we do not sell or share your data with data brokers.

We use Google Analytics to understand which pages people visit and how they arrive. It sets first-party cookies and reports aggregate traffic to us; we have not enabled advertising features, audience remarketing, or data sharing with other Google products. You can opt out for every site with Google's browser add-on, or by blocking cookies for this domain.

Cloudflare Turnstile sets a short-lived cookie during the bot challenge; it's scoped to the challenge interaction and dropped immediately after.

Vouch is for users 18 and older. We don't knowingly collect data from minors. If you believe a minor has signed up, contact us via privacy@vouchcollective.comand we'll delete the account.

Privacy questions, data requests, or anything that feels off: reach us via privacy@vouchcollective.com.

For terms-of-service questions, see our Terms of Service.