Privacy Policy

The short version

We collect the minimum needed to run a trustworthy review platform. We never publish your full name or email. We don't sell your data. Ads are how we make money — not your information.

1. What we collect

Account data: when you sign in with a third-party provider (Google, Apple) or with email and password, we receive your name and email address. We store and display only your first name and last initial publicly.

Review content: the reviews, ratings, flags, and business responses you submit.

Moderation signals: when you submit a review, we record your IP address and use it to derive abuse signals (such as whether the IP belongs to a datacenter or VPN). This is how we keep fake reviews off the platform.

Usage data: standard server logs (pages requested, timestamps, browser type) for operating and securing the service.

Business data: profile information, website URLs, logos, and cover images provided by businesses.

2. How we use it

To operate the platform: displaying reviews and profiles, running search, and providing business dashboards.

To keep reviews honest: automated moderation that scores content and account signals before publication.

To communicate with you: moderation outcomes, review notifications for business owners, and essential service messages. No marketing emails without your consent.

To improve the service: aggregate, de-identified analytics about usage.

3. What we publish

Published reviews are public and shown with your first name and last initial only. Ratings and review counts are aggregated into business scores and may appear in widgets embedded on third-party websites.

4. Advertising and cookies

We show ads served by Google AdSense. Google may use cookies to serve ads based on your prior visits to this or other websites. You can opt out of personalized advertising at adssettings.google.com and learn more in Google's Privacy & Terms.

We use only essential first-party cookies for sign-in sessions. We do not run analytics trackers of our own.

5. Who we share with

Service providers that run the platform: Supabase (authentication and database hosting), Railway (application hosting), Cloudflare (DNS and security), Google (advertising), and Anthropic (automated moderation — review content is processed to assign a quality score). We share only what each provider needs to perform its function.

We may disclose data if required by law or to protect the rights, safety, and integrity of the platform and its users. We do not sell personal data.

6. Retention

Published reviews remain until removed under our moderation policy or at the author's deletion request. Declined reviews are retained for abuse prevention. IP addresses used for moderation are retained for no more than 12 months. Account data is kept while your account is active.

7. Your rights

Depending on where you live (including under GDPR and CCPA), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing.

To exercise any of these rights, email privacy@vouchhaven.com from the address on your account. We respond within 30 days. California residents: we do not sell or share personal information for cross-context behavioral advertising beyond the ad serving described above.

8. Security

We use encryption in transit, scoped API credentials, row-level access controls in our database, and rate limiting. No system is perfectly secure; if a breach affects your data we will notify you as required by law.

9. Children

VouchHaven is not directed at children under 16, and we do not knowingly collect their data.

10. Changes and contact

We may update this policy; the date above will change and material changes will be noted on this page. Data controller: Haynes Lab. Contact: privacy@vouchhaven.com.