Privacy Policy
Last updated 1 January 2026. Short version: we keep what you send us, we use it to find you savings and matches, we never sell it, and we delete it when you ask.
What we collect
From your application and workspace: your company name, industry, work email, the vendors and monthly amounts you enter, what you're struggling with, what you can offer, and any notes or requests you write.
Automatically: basic technical logs, the pages requested, rough time, browser type and an IP address, kept to keep the service running and to spot abuse.
We do not ask for, and do not want, card numbers, bank logins or customer records.
Why we collect it
To run the engine on your numbers, to write your scripts, to look for matches, to sign you in, to take payment through Stripe, and to answer you when you email us. That's the complete list. We do not build advertising profiles.
Who can see it
You and your seats. Our operator, for support and account issues only, and our processors: our hosting and database provider, Stripe for payments, and the AI provider that drafts findings from your data. Nobody reads your bills by hand. Other members never see your bills or your numbers. An introduction only happens when both sides say yes.
Cookies
We use a small number of strictly necessary cookies and similar browser storage. One keeps you signed in after you click a magic link. One remembers the email you last used so we can pre-fill it if a link expires. We set no advertising cookies, run no third-party trackers, and do not sell or share browsing data. Clearing your browser storage signs you out and loses nothing else.
Security
Data is encrypted in transit and at rest with our hosting provider. Access to the database is restricted to row-level rules tied to your signed-in email, so one member cannot read another's workspace. Sign-in is passwordless, which means there is no password of yours for anyone to steal. Administrative access is limited to a named allowlist and every privileged action is logged. If we ever suffer a breach affecting your data we will email you within 72 hours of finding it, and tell you what we know even while we're still working it out.
How long we keep it
Workspace data stays while your account is open and for 12 months after it closes, in case you come back. Payment records are kept for six years because tax law requires it. Technical logs are kept for 30 days.
Your rights
You can ask for a copy of your data, a correction, or full deletion. Email hello@vouchai.cloud and we act within 30 days, usually the same week. Deletion means deletion, your findings, scripts, matches and application are removed, and we tell you when it's done.
Contact
Elisha Asojo, Vouch: hello@vouchai.cloud. If you're unhappy with our answer you can complain to your local data protection authority.