Privacy
Policy

We only collect what is necessary to operate Vouch:

• Account info: Your email address, used to create and manage your account via Clerk authentication.
• Instagram handle: Your public Instagram username, so we can match you to campaigns and verify posts. We never ask for your Instagram password.
• PayPal email: For Creators, your PayPal email address to send payouts. We do not store your full PayPal account details.
• Campaign data: Content submitted by Advertisers (reels, briefs, budgets) and participation records (which Creators shared which campaigns).
• Verification data: Whether a post is live at the time of our automated check. We do not retain screenshots or copies of your Instagram posts.
• Basic usage data: Standard server logs (pages visited, timestamps, IP addresses) for security and debugging. These are not linked to your identity and are deleted after 30 days.

• To operate your account and authenticate you securely
• To match Creators with relevant campaigns
• To verify that campaign posts are live and meet brief requirements
• To process and release payouts to Creators via PayPal
• To communicate important account and campaign updates via email
• To detect and prevent fraud and platform abuse

We do not use your data for any purpose not listed here.

We use the following trusted third-party services to operate Vouch. Each is bound by its own privacy policy:

• Clerk — Authentication and user account management. Clerk stores your email and handles sign-in securely. Clerk Privacy Policy
• Supabase — Our database provider, hosted on AWS (Mumbai region). Campaign, participation, and payout data is stored here. Supabase Privacy Policy
• PayPal — Used to send Creator payouts. We pass only your PayPal email; we do not handle your payment credentials directly. PayPal Privacy Policy
• Klarna — Optional instalment payment service for Advertisers. Klarna processes payments independently under their own terms. Klarna Privacy Policy
• Vercel — Our hosting provider. Standard server-side logs may be processed by Vercel. Vercel Privacy Policy

We use a minimal set of cookies:

• Session cookies: Set by Clerk to keep you logged in. These are essential and expire when you sign out or close your browser.
• Preference cookies: Small cookies that remember your UI preferences (e.g., active tab). No personal data is stored.

We do not use advertising cookies, retargeting cookies, or any third-party tracking cookies.

We retain your account data for as long as your account is active. If you delete your account:

• Your email and profile data are deleted within 30 days.
• Anonymised transaction records (for accounting purposes) may be retained for up to 7 years as required by law.
• Server logs are deleted after 30 days.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Object to or restrict processing of your data
• Data portability (receive your data in a machine-readable format)

To exercise any of these rights, email us at hello@vouchh.xyz. We will respond within 30 days.

Vouch is not directed at anyone under the age of 18. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a new effective date. For significant changes we will notify you by email.

Questions, concerns, or data requests? Email us at hello@vouchh.xyz. We take privacy seriously and will get back to you promptly.