Privacy Policy

1. What this policy covers

This Privacy Policy explains how Vouchpop (vouchpop.com, the “Service”) collects, uses, and protects personal data when you use the Service — whether as an account holder or as a customer submitting a testimonial through a collection form.

2. Data we collect

Account holders: name, email address, password (stored as a salted hash; never in plain text), business name, brand settings, locale, and sign-in method (email or Google).

Testimonial authors: the name, role, company, rating, text, photo, and video you choose to submit through a collection form. Submitting is voluntary; only submit what you are comfortable being displayed publicly by the business that invited you.

Usage and attribution: page visits, referrer/UTM parameters, approximate country (from request headers), and technical logs (IP address, user agent) for security and analytics. We do not use third-party advertising trackers.

Payments: handled by Lemon Squeezy, LLC as Merchant of Record. We never see or store your full card number.

3. How we use data

To operate the Service: authentication, hosting and displaying testimonials and widgets, automatic video captioning, sending transactional email (password reset, team invites), and customer support.

To improve the Service: aggregate, non-identifying analytics about feature usage and conversion.

We do not sell personal data, and we do not use your testimonials or videos to train AI models.

4. Processors we rely on

We share data only with processors needed to run the Service: Vercel (hosting), Turso (database), Vercel Blob (photo/video storage), Lemon Squeezy (payments), Resend (transactional email), Google (optional sign-in), and Anthropic (AI text generation for request messages and video captions). Each processor receives only the data required for its function.

5. Cookies

We use strictly necessary cookies only: a session cookie to keep you signed in, a locale cookie to remember your language, and short-lived security cookies during sign-in flows. No advertising or cross-site tracking cookies.

6. Retention and deletion

Data is retained while your account is active. When you delete your account (or a testimonial author asks the business to remove their testimonial), the data is deleted within a reasonable period, except minimal records we must keep by law (e.g., billing records).

7. Your rights

Depending on your jurisdiction (including GDPR for EEA/UK residents and PIPA for Korean residents), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us using the details below. If you submitted a testimonial to a business, you may also contact that business directly — they control whether and where your testimonial is displayed.

8. Security

All traffic is encrypted in transit (HTTPS). Passwords are hashed, sessions are signed, and access to production systems is restricted. No method of storage is 100% secure, but we work to protect your data with industry-standard measures.

9. Changes to this policy

We may update this policy from time to time. Material changes will be announced on the site or by email.

10. Contact

Privacy questions or data requests: use the contact form at the bottom of vouchpop.com — messages reach the operator directly.

11. Governing language

This Privacy Policy is written in English. Translations are provided for your convenience only. In case of any discrepancy or conflict between a translated version and the English version, the English version prevails.