Privacy Policy

2026

1. Introduction

Vouch ("we," "our," or "us") operates the Vouch platform, a marketplace that connects brands with content creators on TikTok and Instagram. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your name, email address, username, and account type (creator or brand).

2.2 Social Media Information

To verify your identity, we collect your TikTok handle and may access basic profile information through TikTok's API, including your username, display name, and profile picture.

2.3 Payment Information

For brands, we collect payment information through our payment processor (Stripe) to fund campaigns. For creators, we collect bank account details for payouts. We do not store full payment card numbers on our servers.

2.4 Usage Data

We collect information about how you use our platform, including posts submitted, campaigns participated in, and transaction history.

3. How We Use Your Information

  • To provide and maintain our platform services
  • To verify your identity and social media accounts
  • To process payments and payouts
  • To match creators with relevant brand campaigns
  • To communicate with you about your account and campaigns
  • To improve our platform and develop new features
  • To comply with legal obligations

4. Information Sharing

We Do Not Sell Your Personal Information: Vouch does not sell, rent, or trade your personal information to third parties for their marketing purposes. We are committed to protecting your privacy and will never monetize your data in this way.

We may share your information with:

  • Service Providers: Third-party services that help us operate our platform, such as payment processors, cloud hosting, and analytics providers
  • Brands: If you're a creator, we share your profile information with brands for campaign matching purposes
  • Creators: If you're a brand, we share your campaign details with creators who may be interested
  • Legal Requirements: When required by law or to protect our rights

5. Data Security

We implement industry-standard security measures to protect your information, including encryption, secure authentication, and regular security audits. However, no method of transmission over the internet is 100% secure.

6. Your Rights

You have the right to:

  • Access your personal information
  • Correct inaccurate information
  • Delete your account and data (see Section 7 for details)
  • Opt-out of certain communications
  • Request a copy of your data in a portable format
  • Object to processing of your personal data
  • Withdraw consent where processing is based on consent

To exercise these rights, please contact us at support@vouchforthat.com.au or use the account deletion feature in your profile settings.

7. Data Deletion

7.1 How to Request Data Deletion

You can request deletion of your account and all associated personal data in the following ways:

  • Through the App: Go to your Profile settings and click "Delete Account". Follow the prompts to confirm your deletion request.
  • By Email: Send a deletion request to support@vouchforthat.com.au with the subject line "Account Deletion Request" and include your account email address.
  • By Contact Form: Use the contact form on our website to submit a deletion request.

Once we receive your deletion request, we will verify your identity and process your request in accordance with this policy.

7.2 What Gets Deleted

Upon receiving a deletion request, we will delete the following information:

  • Delete your account and profile information from our active systems
  • Remove all personal data including name, email, phone number, and location
  • Delete social media connection data (TikTok and Instagram OAuth tokens)
  • Remove uploaded profile images and content from our storage
  • Delete posts and campaign participation records
  • Remove payment and transaction data (subject to legal retention requirements)

7.3 Deletion Timeline

Account deletion requests are processed immediately. Your data will be removed from our active systems within 24 hours of your request. Complete deletion from all backups and archives may take up to 30 days.

7.4 TikTok Data Deletion Compliance

In compliance with TikTok's Developer Data Sharing Agreement and Terms of Service:

  • We immediately cease using all TikTok data upon account deletion
  • All TikTok OAuth tokens and platform user data are permanently deleted
  • We do not retain TikTok data longer than necessary for platform functionality
  • Upon termination of our TikTok integration, all TikTok-derived data is deleted

7.5 Meta (Instagram/Facebook) Data Deletion Compliance

In compliance with Meta's data deletion requirements:

  • Instagram OAuth tokens and connection data are deleted immediately upon account deletion
  • All Instagram-derived personal data is removed within 90 days as required by Meta policies
  • We comply with Meta's data minimization principles and retention limits

7.6 Apple App Store Compliance

In compliance with Apple App Store guidelines:

  • Users can delete their account directly within the app
  • Account deletion is easily accessible and clearly explained
  • We provide data export functionality before deletion
  • All user data is permanently deleted upon account termination

7.7 Legal Retention Requirements

We may retain certain data for longer periods when required by law, including:

  • Financial records for accounting and tax purposes (typically 7 years)
  • Data required for legal proceedings or regulatory compliance
  • Data necessary to prevent fraud or abuse
  • Data required to fulfill contractual obligations with third parties

When data is retained for legal reasons, it is stored securely and access is restricted to authorized personnel only.

8. Data Retention and Storage

8.1 Retention Periods

We retain your personal data only for as long as necessary to:

  • Provide our services to you
  • Comply with legal obligations
  • Resolve disputes and enforce agreements
  • Maintain security and prevent fraud

Active Accounts: Data is retained while your account is active and for 30 days after account deletion to allow for account recovery if requested.

Deleted Accounts: Most data is deleted within 30 days. Financial records may be retained for up to 7 years for legal and accounting purposes.

8.2 Data Storage and Security

Your data is stored securely using industry-standard encryption and security measures. We use secure cloud infrastructure for database storage and application hosting. Data is stored in secure data centers with appropriate physical and technical safeguards.

Third-Party Storage: We use Stripe for payment processing. Stripe handles payment data in compliance with PCI DSS standards. We do not store full payment card numbers on our servers.

9. PII Compliance and Data Protection

9.1 Personally Identifiable Information (PII)

We collect and process the following PII:

  • Identity Data: Name, email address, username, phone number
  • Profile Data: Profile images, location, social media handles
  • Financial Data: Payment information (processed by Stripe), bank account details for payouts
  • Social Media Data: TikTok and Instagram OAuth tokens, platform user IDs, usernames
  • Usage Data: Posts, campaigns, transactions, interactions

9.2 GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

  • Right to Access: Request a copy of all personal data we hold about you
  • Right to Rectification: Correct inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data ("right to be forgotten")
  • Right to Restrict Processing: Limit how we use your data
  • Right to Data Portability: Receive your data in a structured, machine-readable format
  • Right to Object: Object to processing based on legitimate interests

To exercise your GDPR rights, contact us at support@vouchforthat.com.au. We will respond within 30 days as required by GDPR.

9.3 CCPA/CPRA Compliance (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

  • Know what personal information is collected and how it's used
  • Delete personal information (with certain exceptions)
  • Opt-out of the sale of personal information (we do not sell your data)
  • Non-discrimination for exercising your privacy rights
  • Correct inaccurate personal information
  • Limit use of sensitive personal information

California residents can exercise these rights by contacting us at support@vouchforthat.com.au or using the account deletion feature in the app.

10. Cookies and Tracking

We use cookies and similar technologies to enhance your experience, analyze usage, and support authentication. You can control cookies through your browser settings.

Types of Cookies We Use:

  • Essential Cookies: Required for authentication and core functionality
  • Analytics Cookies: Help us understand how users interact with our platform
  • Preference Cookies: Remember your settings and preferences

11. Children's Privacy

Our platform is not intended for users under 18 years of age. We do not knowingly collect information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information immediately.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@vouchforthat.com.au.

12. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws.

For users in the EEA, we rely on Standard Contractual Clauses and other legal mechanisms to ensure adequate protection of your data when transferred outside the EEA.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. For significant changes, we may also notify you via email or through the app.

Your continued use of our platform after changes become effective constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Support Email: support@vouchforthat.com.au
Website: https://vouchforthat.com.au

Data Protection Officer: For GDPR-related inquiries, you can also contact our Data Protection Officer at support@vouchforthat.com.au.