Privacy policy

Who we are

Samrat Kar, an individual based in Pune, India ("we"), runs vouchgeo.com and decides how the personal data described here is used. You can reach us at hello@vouchgeo.com.

What we keep

We keep only what Vouch needs to work:

• Account details: your name, your email address, your password (stored only as a one-way hash, never as you typed it), whether you have confirmed your email, and when you joined.
• Organisation details: the organisation's name, its members and their roles, invitations (the invited email address and role), and the plan and its billing status.
• What you enter: projects, brand names, aliases, websites, competitors, countries and the prompts you track.
• What Vouch collects for you: the answers AI assistants give to your prompts, the pages they cite, and the scores Vouch works out from them.
• Sign-in sessions: when each started and was last used, and the IP address and browser it started from. A session ends after 30 days without use.
• Security records: a log of important actions in your organisation, such as invitations, role changes and plan changes, and of Vouch staff opening your organisation's data; and counters of recent sign-in, sign-up, password reset, invitation, password change, verification email and billing attempts, each stored only as a one-way hash of the email address, IP address, account or organisation it counts.
• Emails we send you: account emails such as email confirmation, password reset, invitations and billing notices. Our email outbox keeps the recipient, subject and delivery status of each email we send. The body is kept only until it is sent or delivery is abandoned.

What we do not do

We use no analytics, advertising or tracking cookies, and load no third-party scripts on our pages. We never see or store card details: when online payment is live, they go straight to our payment provider. We do not sell personal data.

Why we use it

We use personal data:

• to provide Vouch under our terms of service, including the emails your account needs;
• to keep Vouch and your account secure, and to stop abuse, which is in our legitimate interests and yours;
• to take payment and keep the records that tax and accounting law require.

Who helps us

We use other companies to run Vouch. Each one receives only what it needs for its job:

• Hosting and database providers, which store and serve everything described above.
• AI providers: the assistants we track receive your prompts and the follow-up questions, and an AI provider analyses their answers. They do not receive your name or email address.
• An email delivery provider, which sends our emails to you.
• Our payment provider, once online payment is live, who acts as merchant of record: it takes payments and handles tax at checkout.

Where your data goes

Some of these providers process data outside your country, including in the United States. For each such transfer we rely on a transfer safeguard the law recognises. We name our providers on request: email hello@vouchgeo.com for the current list and the safeguard used for each.

Cookies

Vouch sets two cookies, and only these:

• a session cookie that keeps you signed in, which Vouch cannot work without;
• vouch_theme, which remembers whether you chose light or dark, and is set only if you choose one.

How long we keep it

We keep your account, organisation and project data while your account is open.

If you ask us at hello@vouchgeo.com to delete your account or organisation, we will delete or anonymise its personal data within 30 days, except records the law requires us to keep, such as billing records.

Your rights

The main law that applies to the personal data we handle is India's Digital Personal Data Protection Act, 2023. The Act gives you, or will give you as its provisions take effect, these rights, among others: access, correction, erasure, nomination and grievance redress.

• Access: ask us for a summary of the personal data we hold about you and how we use it. Your account page already shows your name and email address. For anything else, email hello@vouchgeo.com.
• Correction: ask us to correct personal data that is wrong or out of date. Vouch has no page for changing your name or email address yet, so we make the change by hand when you email hello@vouchgeo.com.
• Erasure: ask us to delete your personal data. We do this by hand, within 30 days, except for records the law requires us to keep, such as billing records.
• Nomination: ask us to note a person who may act for you if you die or cannot act. Vouch has no way to record this yet, so we deal with it by hand when you email hello@vouchgeo.com.
• Grievance: if you are unhappy with how we have handled your personal data or a request, email hello@vouchgeo.com. That address is our grievance contact, and we reply within one month.

If you live elsewhere

The law where you live may give you more rights, such as to receive a copy of your data, to object to how we use it or to restrict it, and to withdraw consent where we rely on it. Email hello@vouchgeo.com and we will reply within one month.

If we do not settle your grievance, you can complain to the Data Protection Board of India. If you live in the UK or the EU, you can also complain to your data protection authority, such as the Information Commissioner's Office in the UK or the authority in your EU country.

Changes to this policy

If we change this policy in a way that matters to you, we will email the owners of your organisation before the change takes effect.