Vouch Privacy Policy
Last updated: May 17, 2026
Vouch ("we," "us," "our") is a worker-side hiring platform. We provide a Chrome extension and backend services that help job seekers find matching roles, tailor their resumes, and apply to jobs. This policy explains what data we collect, why, and what rights you have.
We are a US-based company. This policy applies to users in the United States. We extend GDPR-style rights to all users as a matter of practice, regardless of location.
1. What we collect
1.1 Information you provide directly
- Resume content. Text, work history, education, skills, and contact information parsed from resumes you upload.
- Profile information. Anything you add or edit in your Vouch profile, including preferences (location, role type, seniority, visa status).
- Account credentials. Email address and authentication tokens (managed via Clerk, our authentication provider, in future versions).
1.2 Information we generate on your behalf
- Tailored resume drafts. Versions of your resume customized by our AI for specific job postings.
- Audit logs. Per-claim records of which parts of a tailored resume are verbatim from your profile, paraphrased, or modified, including the verification source for each claim.
- Application history. Records of which jobs you applied to through Vouch, when, and the status of those applications.
1.3 Information we collect from third parties
- Job posting content. When the extension reads a job page (e.g., on Greenhouse, Lever, or other supported job boards), we process the page text to extract job requirements. We do not store the full page contents — only the structured information needed for matching.
1.4 Information collected automatically
- Usage data. Anonymized event logs about extension usage (which features are used, error reports). We use Sentry for error monitoring.
- Cost tracking. We log AI-model usage per user (token counts, model used, timestamps) to enforce daily spend caps. This data is not shared.
2. What we do NOT collect
- We do not collect financial account numbers, social security numbers, or government identifiers.
- We do not collect biometric data.
- We do not scrape or store facial images.
- We do not access your browser history, bookmarks, saved passwords, or any data outside the job-board pages you explicitly engage with.
3. How we use your data
We use your data only to provide and improve the Vouch service:
- Matching. To find job postings that fit your profile.
- Tailoring. To customize your resume for specific roles you choose to apply to.
- Auditing. To produce the audit score that shows you which claims in a tailored resume are verified against your profile.
- Application tracking. To show you the history of jobs you've applied to through Vouch.
- Operational integrity. To monitor errors, enforce cost caps, and prevent abuse.
We do not sell your data. We do not share your resume, profile, or application history with employers, recruiters, or any third party without your explicit action initiating that share (e.g., when you submit an application).
4. Third-party services we use
We use the following service providers to operate Vouch. Each receives only the data necessary to perform its function.
| Provider | Purpose | Data received |
|---|---|---|
| Anthropic | AI model inference (resume tailoring, audit reasoning) | Resume content and job posting text for the specific tailoring request |
| Supabase | Database hosting | All stored user data |
| Sentry | Error monitoring | Anonymized error logs (PII scrubbed) |
| Greenhouse, Lever, and similar job boards | Job posting source | Read-only; we send your application data only when you initiate an apply action |
| Stripe (future) | Payment processing for the power tier | Payment information (Stripe never shares card numbers with us) |
We do not use third-party advertising networks. Vouch products are ad-free.
5. How long we keep your data
- Active accounts. We keep your data as long as your account is active.
- Deleted accounts. When you delete your data (see Section 7), we purge resumes, profile data, application history, audit logs, and usage logs within 30 days. Backups are cycled within 90 days.
- Anonymized aggregates. We may retain anonymized, aggregated statistics (e.g., "X% of users match to senior backend roles") indefinitely. These cannot be linked back to you.
6. Security
- All data is encrypted in transit (TLS) and at rest (Postgres encryption at the database level via Supabase).
- AI provider calls are authenticated and rate-limited.
- We log every model call for cost and abuse monitoring.
- We do not store your card details directly — payment processing is handled by Stripe.
No system is perfectly secure. If we become aware of a breach affecting your data, we will notify you and the relevant authorities as required by law.
7. Your rights
You have the right to:
- Access the data we hold about you. Email support@vouchforme.ai to request a copy.
- Correct inaccurate data. Edit your profile directly in the extension, or email us.
- Delete your data. Use the in-app delete-my-data option, or email support@vouchforme.ai. Deletion is permanent.
- Export your data in a machine-readable format. Email us to request.
- Withdraw consent at any time by uninstalling the extension and requesting deletion.
We will respond to all requests within 30 days.
California residents have additional rights under the CCPA, including the right to know what personal information is collected and the right to opt out of any "sale" of personal information. We do not sell personal information.
8. Children's privacy
Vouch is not directed to anyone under 18. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
9. Changes to this policy
If we make material changes to this policy, we will notify users via email or in the extension before the changes take effect.
10. Contact
Questions? Email support@vouchforme.ai.
Vouch is operated by Venkat Krishnan, an individual based in Redmond, Washington, United States.