Privacy Policy

Vouch ("we", "us", "our") operates socialproof.dev and the Vouch application at app.socialproof.dev. This Privacy Policy explains what data we collect, why we collect it, and how we protect it.

1. What we collect

We collect information you give us directly and information generated as you use Vouch.

• Account data: your email address and business name when you create an account.
• Testimonials: text, name, and optional photo submitted by your customers via your collection link. This data belongs to you.
• Usage data: pages visited, widget views, and basic analytics to help us improve the product. We use this in aggregate — not to build individual profiles.
• Payment data: if you upgrade to Pro, payment is handled by Stripe. We never see or store your card details.

2. What we do NOT collect

• We do not track your customers beyond what's needed to accept a testimonial submission.
• We do not sell data to third parties.
• We do not use your testimonials to train AI models.
• We do not run advertising or serve third-party tracking pixels on collection pages.

3. How we use your data

• To operate the service: create accounts, store and display testimonials, serve the embed widget.
• To send you transactional emails: verification links, receipts, product updates if you opt in.
• To improve the product: understand how features are used and where users get stuck.

4. Third-party services

We use a small number of third-party services to run Vouch:

• Cloudflare: hosting and CDN. Your data may pass through Cloudflare's infrastructure.
• Resend: transactional email delivery.
• Stripe: payment processing for Pro subscriptions.

Each of these providers has their own privacy policy and data practices. We choose providers with strong data handling standards.

5. Data storage and security

Data is stored on Cloudflare's infrastructure. We use industry-standard encryption (HTTPS/TLS) for all data in transit. Account passwords are hashed; we cannot recover them.

No system is 100% secure. If you discover a security issue, please contact us immediately at [email protected].

6. Data retention

We keep your data as long as your account is active. If you delete your account, all your data — including testimonials and widget configuration — is permanently deleted within 30 days.

You can delete your account at any time from the settings page.

7. Your rights

You have the right to access, correct, export, or delete your data. To exercise any of these rights, email us at [email protected]. We'll respond within 30 days.

If you are in the EU/EEA, you have additional rights under the GDPR, including the right to lodge a complaint with your local supervisory authority.

8. Cookies

We use a minimal session cookie to keep you logged in to the dashboard. We do not use advertising cookies or third-party tracking cookies. The embed widget on your customers' sites does not set cookies.

9. Children

Vouch is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us with data, contact us and we'll delete it promptly.

10. Changes to this policy

We may update this policy occasionally. We'll notify you of material changes by email and update the "Last updated" date at the top. Continued use of Vouch after changes constitutes acceptance.

Contact

Questions about this policy? Email us at [email protected].