Privacy Policy

Information we collect

• Account information. Your email address and a hashed password, or, if you sign in with Google, the name, email address, and profile picture Google shares with us for authentication. We only request basic sign-in access — Vouch never asks for permission to read your Gmail, Google Drive, or any other Google product.
• Your network. The connections CSV you export from LinkedIn and upload, which typically includes each connection's name, company, title, and connection date.
• Your profile. Your resume, if you upload a PDF, plus any work history and skills parsed from it or typed in manually.
• Job preferences. Role focus, seniority, salary floor, and locations you set to tune your matches.
• Payment records. If you unlock full access, our payment processor shares your purchase status and a customer reference with us. We never see or store your card number — see “Payments” below.
• Drafts you generate. The outreach messages Vouch writes on your behalf, saved so you can revisit and edit them.

We don't run any analytics, advertising, or tracking scripts on this site. The only cookie Vouch sets is a session cookie that keeps you signed in.

How we use it

Solely to run the product: matching your connections against companies with open roles, scoring those matches against your preferences, drafting outreach grounded in your real background, authenticating you, and processing your one-time unlock payment. Nothing you upload is used to build a public directory, train a general-purpose model, or shown to any other user.

Who we share it with

We do not sell your personal data, and we do not share it with anyone for advertising or marketing purposes. Running the product does require a small number of third-party infrastructure providers, each of which only receives the specific data needed to perform its job, under its own privacy and security terms:

• Neon — hosts our production database (your account, network, profile, preferences, and draft data).
• Amazon Web Services (Bedrock) — the AI model that parses resume text and drafts outreach messages. Your data is sent for that specific request only and is not used by AWS to train models.
• Dodo Payments — our payment processor and merchant of record. They handle your card details and checkout directly; we only receive confirmation that a payment succeeded.
• Vercel — hosts the application itself.
• Trigger.dev — runs the background job that periodically re-matches your network against newly posted roles.
• Resend — sends transactional email (sign-up verification), nothing promotional.
• Google — only if you choose to sign in with Google, to verify your identity.

We may also disclose information if required by law, or to protect the rights, property, or safety of Vouch, our users, or others.

Payments

Checkout is handled entirely by Dodo Payments on their own hosted page. Vouch never receives or stores your card number, expiry, or CVC. Dodo notifies us only that your payment succeeded, so we can unlock your account.

Data retention

We keep your data for as long as your account is active, so matching keeps working as new roles open up. If you delete your account data (see below), it's removed immediately, not just hidden. Backups that include deleted data age out within a short rolling window.

Your rights and deleting your data

From Settings, “Delete data” immediately and permanently removes your uploaded connections, resume/profile, work history, matches, and drafts — no need to contact us first. Your login and payment record (if you've unlocked) are kept separately so we can maintain accurate financial records and prevent fraud; contact us if you'd like those removed too, or if you'd like a copy of the data we hold on you.

Security

Data is encrypted in transit (HTTPS/TLS) between your browser, Vouch, and every service listed above. Passwords are stored as salted hashes, never in plain text. Access to production data is limited to what's needed to operate the service.

Children's privacy

Vouch is a job-search tool intended for adults entering or navigating the workforce. It is not directed at, and we do not knowingly collect information from, anyone under 18.

Changes to this policy

If this policy changes in a way that affects how your data is used, we'll update the date above and, for material changes, let you know directly.