Vouch - Privacy Policy

Welcome to Vouch ("we", "us", "our", or "the platform"). We respect your privacy and are committed to protecting your personal information in compliance with the General Data Protection Regulation (GDPR), India Digital Personal Data Protection Act (DPDP), California Consumer Privacy Act (CCPA), and other applicable laws. This Privacy Policy explains how we collect, use, process, store, share, and protect your data when you use our website, services, and participate in our beta program.

1. Who We Are

Vouch is an early-stage platform that empowers users to control the advertising and brand offers they see. If you have questions about this policy, contact us at shivacharan.s@gmail.com.

2. What Data We Collect

• Personal Data: Email address, name, city, and (in future) WhatsApp/mobile number for direct communication with your consent only.
• Interest & Intent Data: Your interests, survey responses, preferences, and feedback you provide.
• Usage Data: Technical data such as IP address, device/browser type, OS, and usage statistics (collected via analytics services such as Google Analytics).
• Cookies & Tracking: Cookies or similar technologies may be used to provide a better experience and for analytics (see Section 9).

3. How We Use Your Data

• To provide and improve our services, including matching you with relevant brands, agencies, and offers based on your stated interests and preferences.
• To enable your participation in beta access, and to send you personalized offers, product updates, and important communications.
• To develop new features and better understand user needs through aggregated and anonymized analytics.
• To demonstrate user demand, trends, and intent (in aggregate or, where permitted, on an identified basis) as proof to brands, agencies, and independent marketing consultancies—always for the purpose of customizing and personalizing offers or deals for you.
• To collaborate with brands, agencies, or trusted partners—including independent marketing consultants—solely to deliver offers and experiences you have explicitly shown interest in or consented to receive.
• To comply with legal obligations and protect platform integrity.
• We do NOT sell or rent your data to unrelated third parties. Data is only shared with brands, agencies, or trusted partners for the express purpose of providing you with relevant deals and offers, and always with your explicit consent or based on clear user intent.
• We only send marketing communications with your explicit opt-in consent. You may withdraw consent at any time by unsubscribing or contacting us.

4. Legal Basis for Processing (GDPR & DPDP)

• Consent: We process your data with your explicit consent when you sign up, fill forms, or participate in beta testing.
• Contractual Necessity: To deliver the services you request.
• Legitimate Interest: To improve our product and protect against fraud, while respecting your rights.
• You may withdraw your consent at any time by contacting us.

5. Your Rights

• Access: Request a copy of your data held by us.
• Correction: Ask us to correct or update inaccurate data.
• Deletion: Request deletion of your data ("right to be forgotten") at any time.
• Restriction/Objection: Ask us to restrict or stop certain processing.
• Data Portability: Receive your data in a machine-readable format.
• Withdraw Consent: Opt out of communications or data use at any time (unsubscribe links or email us).
• Complaint: Lodge a complaint with your data protection authority.
• If you are an Indian resident, you have additional rights under India’s Digital Personal Data Protection Act, including the right to grievance redressal, nominate an individual to exercise your rights in case of incapacity, and more. Contact us for details.
• If you are a California resident, you may request a list of all personal information disclosed to third parties for direct marketing purposes in the preceding year, or request that your data not be sold (we do not sell data, but honor all CCPA requests).

6. Data Storage & Security

• Your data is stored securely on trusted cloud providers in India/EU/US, with access strictly controlled.
• We use industry-standard encryption, firewalls, and regular security reviews.
• Personal data (e.g., WhatsApp/mobile) will only be collected and used with your consent for direct communication, never shared or sold.
• We retain your data only as long as needed to fulfill purposes stated in this policy or as required by law.
• In case of any data breach affecting your personal data, we will notify you and relevant authorities as required by law, without undue delay.

7. Sharing & Disclosure

• We may share your data with service providers (e.g., analytics, email platforms, cloud storage) strictly for platform operations, under confidentiality agreements.
• We may disclose your information if required by law or to protect our legal rights, users, or the public.
• We do not share your personal data with brands, advertisers, or external partners for marketing without your explicit permission.

8. International Transfers

Your data may be processed and stored on servers located outside your home country (e.g., EU, India, US). We ensure such transfers comply with applicable laws and protect your data via contractual safeguards.

9. Cookies & Tracking Technologies

• Cookies may be used to remember preferences, analyze usage, and enhance site functionality.
• You can manage cookie preferences in your browser settings. Most features will work even if you disable non-essential cookies.

10. Children’s Privacy

• This platform is not intended for children under 16. We do not knowingly collect data from children. If you believe a child has provided us information, please contact us for immediate removal.

11. Third-Party Links

• Our website may contain links to third-party sites or services not controlled by Vouch. We are not responsible for the privacy or security practices of such sites. Please review their policies before sharing data.

12. HIPAA and Health Data

• We do not collect, process, or store health or medical data. HIPAA does not apply to this platform. If our services change in the future to include health data, we will update this policy and comply with all relevant laws.

13. Changes to This Policy

• This Privacy Policy may be updated periodically. Significant changes will be notified on this page and, where applicable, via email.

14. Contact & Data Protection Officer

• If you have questions, concerns, or wish to exercise your rights, contact us at: shivacharan.s@gmail.com
• Our Data Protection Officer is: DPO, Vouch(shivacharan.s@gmail.com)
• We aim to respond to all requests within 30 days.
• If you believe your data rights have been violated, you may contact your country’s data protection authority, such as the Data Protection Board of India or the EU Data Protection Authority.

By using Vouch, you agree to the collection and use of your information as described in this policy. Your privacy is our promise and priority.