Privacy Policy

Last updated: March 6, 2026

This Privacy Policy explains how VouchBox ("we", "us", or "our") collects, uses, shares, and protects information when you use our platform, website at getvouchbox.com, and related services (collectively, the "Service").

By using the Service, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

In short: We collect what you give us, what your use of the Service generates, and review data from platforms you connect.

Information you provide

Data type	Examples
Account information	Name, email address, password (managed by Supabase)
Business information	Business name, platforms connected, logo, review funnel settings
Payment information	Billing details processed by Stripe (we do not store card numbers)
Communications	Support tickets, feedback, and messages you send us

Information collected automatically

Data type	Examples
Usage data	Pages visited, features used, dashboard activity timestamps
Device information	Browser type, operating system, screen size
Funnel analytics	Review funnel views, clicks, and redirect events (anonymized)

Information from third parties

Data type	Examples
Review data	Reviews, ratings, reviewer names, and review dates from Google, Yelp, and TripAdvisor
Business listing data	Business name, address, category, and rating as listed on connected platforms
Authentication data	Account data from Supabase (our authentication provider)

2. How We Use Your Information

In short: To provide, improve, and communicate about the Service.

We use the information we collect to:

Provide the Service — aggregate reviews, display dashboards, generate AI replies, send email notifications, and power review funnels.
Process payments — manage subscriptions and billing through Stripe.
Send communications — transactional emails (weekly reputation digests, unanswered review reminders, inactivity nudges, and upgrade notifications). You can manage email preferences in your settings.
Improve the Service — analyze usage patterns, fix bugs, and develop new features using aggregated, anonymized data.
Provide support — respond to your questions and resolve issues.
Ensure security — detect and prevent fraud, abuse, and unauthorized access.

3. AI Features & Your Data

In short: AI helps generate replies and summaries. We never use your data to train AI models.

VouchBox uses third-party AI services (Anthropic's Claude) to power features like draft review replies, review summaries, and email template rewriting.

When you use an AI feature, relevant data (e.g., a review's text and rating) is sent to our AI provider to generate a response.
We do not use your data to train AI models. Our AI provider (Anthropic) does not use API inputs for model training.
AI-generated content may be inaccurate. You are responsible for reviewing and approving all AI outputs before use.

4. How We Share Your Information

In short: We don't sell your data. We share only with service providers that help us operate.

We do not sell, rent, or trade your personal information. We share data only in these circumstances:

Service providers — trusted third parties that help us operate the Service:
- Supabase — authentication and user management
- Supabase — database hosting
- Stripe — payment processing
- Resend — email delivery
- Anthropic — AI features
- SerpApi — review data retrieval from third-party platforms
- Vercel — application hosting
Legal requirements — when required by law, legal process, or to protect the rights, safety, or property of VouchBox or others.
Business transfers — in connection with a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before this occurs.

5. Review Funnel & Public Pages

If you use VouchBox's review funnel feature, your customers may interact with a public page that collects their star rating selection and redirects them to a review platform. We collect anonymized analytics (views, clicks, redirects) on these pages. We do not collect personal information from your customers through the review funnel unless they voluntarily submit feedback.

Customer feedback submitted through the funnel is stored and associated with your business account. It is not shared publicly.

6. Cookies & Tracking

We use essential cookies required for authentication and session management. We do not use third-party advertising cookies or cross-site tracking.

Our hosting provider (Vercel) may collect basic analytics data. You can control cookies through your browser settings.

7. Data Retention

In short: We keep your data while your account is active and for 30 days after cancellation.

We retain your information for as long as your account is active or as needed to provide the Service. When you cancel your account:

You may request a copy of your data by contacting us within 30 days of cancellation.
After 30 days, we will delete your Customer Data from our active systems.
Some data may be retained in encrypted backups for up to 90 days.
We may retain anonymized, aggregated data indefinitely for analytics purposes.

8. Data Security

We implement industry-standard security measures to protect your information, including:

Encryption in transit (TLS/HTTPS) and at rest.
Secure authentication through Supabase with support for multi-factor authentication.
Role-based access controls for our internal systems.
Regular security reviews of our infrastructure and dependencies.

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Your Rights

In short: You can access, update, export, or delete your data at any time.

Depending on your location, you may have the following rights:

Access — request a copy of the personal information we hold about you.
Correction — update or correct inaccurate information via your account settings.
Deletion — request deletion of your personal information by canceling your account or contacting us.
Export — request a copy of your data in a portable format.
Opt-out of communications — manage email preferences in your account settings or unsubscribe from non-essential emails.

To exercise any of these rights, contact us at support@getvouchbox.com. We will respond within 30 days.

California residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of any sale of personal information. We do not sell personal information.

European residents (GDPR)

If you are located in the European Economic Area, you have additional rights including data portability, restriction of processing, and the right to lodge a complaint with your local data protection authority. Our legal basis for processing is contract performance (to provide the Service) and legitimate interest (to improve and secure the Service).

10. Children's Privacy

The Service is not directed to individuals under 16 years of age. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 16, we will delete it promptly.

11. Third-Party Links

The Service may contain links to third-party websites or services (including Google, Yelp, and TripAdvisor). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service at least 30 days before they take effect. The "Last updated" date at the top reflects the most recent revision.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

VouchBox
Email: support@getvouchbox.com