Privacy Policy

It depends on how you use Vouch.

If you run a business on Vouch:

• Your name, email address, business name, services, areas served, a short bio, a logo and cover photo if you add them, links to your website and social pages, and a booking link.
• Your reward ladder and settings.
• Customer lists you upload or sync from a connected platform: names, email addresses, phone numbers if your list has them, and the platform's customer ids. You are responsible for having the right to share them.
• When you connect an invoicing or job platform (Stripe, QuickBooks Online or Jobber), the access tokens that platform issues, plus the customer, job and invoice data needed to match referrals and apply rewards: customer identities, job status, invoice numbers, amounts and discount lines.

If you refer people for a business (an advocate):

• Your name and email address, and a phone number if the business's customer list included one.
• A payout handle such as a Venmo or Zelle address, only if the business offers cash rewards and you choose to add one.
• Your referral activity: your link, who registered through it, and every state change of each reward you earn.

If you register through someone’s referral link:

• Your name and an email address or phone number, the business you registered with, and which advocate's link you used.

Everyone:

• A session cookie after you sign in. It holds a random token, nothing about you. A business connecting a platform also gets a short-lived cookie for the length of that handshake.
• Standard server logs: IP address, browser type, the pages requested and when.
• Your light-or-dark theme choice, stored in your own browser and never sent to us.

• To run the referral program: create links, match a referred customer to the right business and advocate, detect or record closed jobs, compute rewards and write a discount onto an invoice when the business confirms it.
• To sign you in and keep your session.
• To send the emails described below.
• To keep a record of every reward's history, which is what settles a dispute between a business and a customer.
• To detect fraud such as self-referrals or fake customers.
• To keep the service working and secure, and to fix problems.

We do not use your information for advertising, and we do not sell it.

• The business you joined or were referred to. A business sees the names, contact details, referral activity and rewards of its own advocates and referred customers. It does not see other businesses’ data.
• Platforms a business connects. At the business’s direction, Vouch sends discount details to that business’s Stripe, QuickBooks Online or Jobber account. When a business offers a welcome discount, a referred customer’s name and contact details go to that account too, so the discount can be attached to them. Those platforms handle that data under their own privacy policies.
• Service providers that run Vouch: Vercel (hosting), Neon (database) and Resend (email delivery). They process data only to provide those services.
• When the law requires it, or to protect the rights and safety of Vouch, its users or others.

Advocates’ payout handles are shown only to the business that owes them a cash reward. Vouch never sends money and never collects payment card details.

Vouch sets one cookie after you sign in so you stay signed in, and a short-lived cookie while a business connects a platform, which is removed when the connection completes. There are no advertising cookies, no analytics scripts and no third-party trackers on the site. Because we do not track you across sites, we do not respond to browser “Do Not Track” signals differently; there is nothing to turn off.

We email people who signed up or were added by a business they already do business with. Today that is two kinds of email: a sign-in code when you ask for one, and a one-time invitation when a business adds you. The invitation has an unsubscribe link, and we honor it. If we add other notices, they will carry one too.

Vouch does not send text messages. Vouch does not contact the people an advocate refers until they have completed a job and become the business’s own customer; at that point they may receive the one-time invitation email like any other customer, with the same unsubscribe link. Advocates share their own link, themselves. If you register through a link, the business you chose may contact you under its own practices.

• Account and profile details: as long as the account exists.
• Reward history: this is the record a business and a customer rely on if they disagree, so each reward's history is kept while the business's program exists, even after an individual reward is used or expires.
• Platform tokens: while the connection exists. Revoke Vouch's access from the platform's own settings, or ask us to remove the connection, and the tokens stop being used.
• Sign-in codes: ten minutes. Sessions: thirty days, or until you sign out.
• Server logs: a short period for security and debugging.

Write to support@vouchreferrals.com to see what we hold about you, correct it, or ask us to delete it. We answer within 30 days. When we delete an account we remove profile and contact details; we may keep a minimal record of rewards that were applied or paid, because the business needs it for its own books.

Businesses can edit their details from Settings. Advocates can edit their payout handle from a reward page. Anyone can unsubscribe from invitations with the link in the email.

California residents: we do not sell or share personal information for advertising, and we do not use it for profiling. The rights above are available to you regardless of whether a particular California privacy law applies to a service of our size.

Vouch stores no passwords. Sign-in uses one-time codes, and only a hash of each code and each session token is stored. Data travels over HTTPS. Platform tokens are kept with the connection they belong to and used only to perform the actions the business asked for. No system is perfectly secure, so please contact us if you believe something is wrong.

Vouch is for businesses and their adult customers. We do not knowingly collect information from anyone under 18. If you believe we have, tell us at support@vouchreferrals.com and we will delete it.

When this policy changes, the effective date at the top changes with it. We will email account holders about material changes before they take effect.

Privacy questions and requests: support@vouchreferrals.com. Our Terms of Service cover the rest of the agreement.