Privacy Policy

Last updated 6 October 2026

Voushify is a platform for verified recommendations. Someone (a Voushee) asks another person (a Vousher) to write a recommendation — a Voush — about their work. A third person (a Viewer) may later be allowed to read it.

That shape matters for privacy, because a Voush is information about one person written by another. This policy explains what we collect, why we hold it, who can see it, and what you can ask us to do with it.

1. Who we are

Voushify is operated by [LEGAL ENTITY NAME NOT SET]. We are the business responsible for the personal information described in this policy. You can reach our privacy team at trust@voushify.com.

This policy applies to voushify.com and the Voushify application. It does not apply to other sites we link to, which have their own policies.

2. What we collect

2.1 Information you give us

• Account information — your email address, your phone number and a password. We ask for your phone number at sign-up. We never show it on your profile or to other users, and we don't verify it. We store passwords only as a bcrypt hash; we never store the password itself and cannot read it.
• Profile information — the display name, headline, location, website, biography, skills, work history, education and achievements you choose to add. We ask for your current role and company at sign-up; everything else is optional, and all of it is information you decide to publish about yourself.
• A profile photo, if you upload one.
• Voush requests — the email address of the person you ask, the skills you ask them to speak to, any note you write, and the audience you choose.
• Voush content — what a Vousher writes about a Voushee, including any document or video they attach.
• Support requests — what you send us through the help center (your name, the topic, subject and description, and any images you attach), and our replies.

2.2 Information we collect automatically

• Session information — a cookie that keeps you signed in.
• Security and abuse-prevention data — IP address and request counts, used to enforce rate limits and detect credential-stuffing. This is how we stop someone guessing passwords against your account.
• Timestamps — when an account was created, when a Voush was submitted, when a password was last changed.
• Viewer activity — when someone opens a profile or a share link you created, we record that it happened so we can show you who has viewed your record.

2.3 Information from other people

Because Voushify is about recommendations, some information about you is written by someone else. A Vousher writes about a Voushee. If someone asks you for a Voush, we receive your email address from them before you have an account.

We also receive your email address when someone adds you as an approved Viewer of a restricted Voush.

2.4 What we do not collect

We do not collect your full payment card number. Payments are processed by Stripe, and we never receive or store your full card number — we hold only an identifier that lets us ask Stripe about your subscription, plus the last four digits and card brand Stripe returns to us.

We do not buy personal information from data brokers, and we do not build advertising profiles.

3. Why we use it

• To run the service — create your account, deliver Voush requests, store and display Voushes, and enforce who is allowed to see what.
• To keep it trustworthy — verify identity where you ask us to, screen submissions for abusive content, and act on reports.
• To keep it secure — rate limiting, lockouts, session management, and detecting misuse.
• To take payment — manage subscriptions and one-off purchases.
• To handle support requests — support requests are read by our operations team, who use what you send to handle your request.
• To communicate with you — send the emails the service depends on, such as a Voush request, a password-reset code, or a reminder. These are not marketing emails and you cannot switch off the ones the service requires, though you can close your account.
• To meet legal obligations — tax and accounting records, and responding to lawful requests.

4. Who can see your Voushes

This is the part of the policy most people care about, so it is stated plainly.

Every Voush has an audience chosen by the Voushee when they make the request, and agreed by the Vousher when they accept it:

• Public — any signed-in Voushify user may read it.
• Network — only people connected to the Voushee.
• Restricted — only the specific people named, each approved by the Vousher.

On top of that, a free (Basic) account is Blind: nobody else can view your profile or your Voushes at all, whatever audience was chosen. You can still read everything you have received, privately. Paid plans lift the blind and the chosen audience then applies.

Reading anything on Voushify requires an account. There is no anonymous browsing and no public preview of someone's trust record.

5. Who we share it with

We do not sell your personal information. We share it only with:

• Other Voushify users, according to the audience rules in section 4.
• Service providers who process data on our behalf under contract — our hosting provider, our email delivery provider, and our payment processor (Stripe). They may use it only to provide their service to us.
• An automated content-review and skill-extraction provider (Google, via the Gemini API). Two things are sent to it: the text of a Voush, when it is submitted, so it can be checked against our content rules; and the text of a CV or document you upload, when you ask us to suggest skills from it. This is automated processing — no human at that provider reviews your content — and it happens on our servers, not in your browser.
• Identity verification providers, where you ask us to verify you.
• Law enforcement or regulators, where we are legally required to, or where we reasonably believe it is necessary to prevent serious harm.
• An acquirer, if the business is sold or merged. We will tell you before your information moves to a different controller.

6. How we protect it

• Voush content is encrypted at rest using AES-256-GCM, with an integrity hash stored alongside it so we can detect tampering.
• Passwords are hashed with bcrypt and are never stored or logged in readable form.
• Sessions are evicted when a credential changes. If you change or reset your password, sessions created before that moment stop working — so a stolen session cannot outlive the reset that was meant to kill it.
• Attachments are not publicly served. Documents and video attached to a Voush are delivered only through an access-checked route, never from a public folder.
• Transport is encrypted with TLS, and session cookies are marked Secure and HttpOnly on our production site.

No system is perfectly secure, and we do not claim otherwise. If we become aware of a breach affecting your information we will notify you and any regulator as required by applicable law.

7. How long we keep it

• Your account — while it is open, and for a short period afterwards so it can be restored if closed by mistake.
• Voushes you have received — these are your trust record. A change of plan does not affect them: we do not delete the Voushes you have received when you downgrade or cancel. A Vousher on a paid plan can retract what they wrote, within a limited time after submitting it, and moderation can remove content that breaks our rules, but billing never strips your record.
• Security logs — rate-limit counters expire within hours. Other security records are kept only as long as needed to investigate abuse.
• Billing records — as long as tax and accounting law requires.

When you close your account we delete or anonymise your personal information, except where we must keep it for legal reasons, and except for the content of Voushes you wrote about other people — that is their record, not only yours.

8. Your rights

Wherever you live, you can ask us to:

• Access the personal information we hold about you.
• Correct anything inaccurate.
• Delete your account and personal information, subject to the limits in section 7.
• Export a copy of the information you gave us.
• Object to a particular use, or ask us to restrict it.

Email trust@voushify.com and we will respond within the time your local law allows. We will not charge you for a reasonable request, and we will not treat you differently for making one.

8.1 If you live in California

The California Consumer Privacy Act, as amended by the CPRA, gives you the rights above plus the right to know the categories of personal information we collect, the purposes we collect them for, and the categories of third parties we disclose them to — all of which are set out in sections 2, 3 and 5.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We have not done so in the preceding twelve months, and we do not knowingly do so for anyone under 16. Because we do not sell or share in that sense, there is no "Do Not Sell or Share My Personal Information" action for you to take — but if that ever changes, we will say so here and provide one before it does.

You may designate an authorised agent to make a request on your behalf. We will ask for proof of that authority, and for enough information to verify your identity, before we act on a request.

8.2 Other US states

Several states — including Virginia, Colorado, Connecticut, Utah and Texas — give residents similar rights to access, correct, delete and obtain a copy of their personal information, and to appeal a refusal. We handle every request under section 8 regardless of where you live, and if we decline a request we will tell you why and how to appeal.

9. Cookies

We use a small number of cookies, all of them necessary for the service to work:

We set exactly one cookie: a session cookie that keeps you signed in. It is HttpOnly, so JavaScript cannot read it, and marked Secure on our production site. That is the only cookie Voushify sets.

We do not use advertising cookies, we do not run analytics, and we do not set any cookie that profiles you across other sites. Blocking cookies entirely will stop you being able to sign in.

Our pages load their fonts, styles and scripts from Voushify itself, not from font or code-hosting services, so no such provider receives your IP address or can set a cookie when you view a page. When you choose to pay or manage a subscription, you are sent to our payment processor (Stripe), whose own privacy policy and cookies apply there.

10. Where your information is held

Voushify is operated from the United States, and your information is stored and processed there. If you use Voushify from another country, you are sending your information to the United States, where privacy law differs from your own. Where we use service providers outside the United States, we require them by contract to protect it to the standard described here.

11. Children

Voushify is not for children. It is intended for people in working life, and you must be at least 16 to use it. We do not knowingly collect personal information from a child under 13, and if we learn that we have, we delete it. If you believe a child has given us information, email trust@voushify.com.

12. The Voush Score

Your Voush Score is calculated from the Voushes you have received and chosen to keep. Two things about it are worth stating in a privacy policy, because they affect what your data is used for.

First, the Voush Score cannot be bought. Nothing you pay for moves your own Score: paid features change who can see your record, not the number, and the underlying audit trail stays intact. The one paid action that changes a Score is a Vousher retracting a Voush they wrote, within a limited time after writing it. That withdraws their own words and gains them nothing.

Second, Voushify is decision support. Your Score reflects the Voushes you chose to keep. It is not a decision about you, and we do not make automated decisions that produce legal effects about you.

13. Changes to this policy

If we make a material change we will tell you by email or in the application before it takes effect, and update the date at the top of this page. Continuing to use Voushify after a change means you accept the updated policy.

14. Contact

Privacy questions and requests: trust@voushify.com. General support: trust@voushify.com.

Postal address: [LEGAL ENTITY NAME NOT SET].