Legal

Privacy policy

We collect as little as we need to run an honest review platform, keep it in the EU, and never sell it.

Draft

This page is a working draft and has not been reviewed by a lawyer. Placeholders in square brackets will be filled in before launch. Last updated: [Date].

Who is responsible

[Company legal name] ([Registered address]) is the controller of your personal data. Contact: [privacy@vouchmeter.com]. [Founder to confirm whether a Data Protection Officer or EU representative is required.]

What we collect

Account data: email address, display name, and optionally country, a short bio and an avatar image link.
Content: reviews, ratings, dates of experience, helpful votes, reports, and business replies.
Invitation data: when a business invites you, the name, email and order reference it gives us.
Technical data: sign-in cookies, IP address and device information in server logs, and product analytics events (see the cookie policy).

Why we use it

To run your account and publish your reviews (contract).
To prevent fake reviews, abuse and fraud, and to moderate content (legitimate interests, legal obligation).
To send service emails such as sign-in links and moderation updates (contract).
To understand how Vouchmeter is used and improve it (legitimate interests or consent, as applicable).

What is public

Your display name, avatar, country, bio, review count and published reviews are public. Your email address is never shown. Business replies to your reviews are public.

We do not sell personal data. We use these processors to run Vouchmeter:

Supabase (database and authentication, hosted in the EU, Ireland)
Vercel (website hosting)
SendGrid (email delivery)
PostHog (product analytics, EU hosting)

When you review a business that invited you, the business can see that its invitation led to a review. [Founder to confirm the full processor list, transfer safeguards and data processing agreements.]

How long we keep it

We keep account data while your account is open. When you request deletion, we delete your account, reviews and votes within 30 days, except minimal records we must keep by law or to handle disputes. [Founder to set specific retention periods for logs, invitations and moderation records.]

Your rights

Under the GDPR you can ask for access to, correction, deletion or a copy of your data, and object to or restrict some uses. You can also complain to your local data protection authority. Many details can be changed directly in your profile.

Contact

Email [privacy@vouchmeter.com] or write to [Company legal name], [Registered address]. We reply within one month.