Privacy Policy

Last updated: 3 September 2026

In short

  • Your interview recordings and transcripts are used to write your applications, nothing else. They are never sold and never used to train AI for anyone else.
  • Analytics (PostHog) and the Meta Pixel only run after you click Accept in the cookie banner. Decline and only the strictly necessary cookies are set.
  • You can delete your account and every piece of data attached to it yourself, from Settings, at any time.
  • Questions or requests: support@myvouch.io.

The summary is here to help you read. The full text below is what applies.

This policy explains what personal data Vouch processes, why, for how long, and the rights you have. It applies to myvouch.io, the Vouch web app, the browser extension, and the voice interviews with Maya.

1. Who is responsible

The data controller is mimoco ApS (trading as Vouch), Danish company reg. (CVR) 39127709, Turistvej 177, 3460 Birkerød, Denmark. Contact: support@myvouch.io.

mimoco ApS is established in Denmark and offers Vouch to people in the United Kingdom. A UK representative under Article 27 of the UK GDPR is being appointed; the name and contact details will be published here as soon as that is in place. Until then, please direct all requests to the email above.

2. What we collect and why

DataWhy we process itLegal basis
Account: email, password (hashed), or your LinkedIn login identityTo create and secure your account and to contact you about itContract
Profile: name, phone, location, summary, CV and other documents you upload, writing samples, style rulesTo write cover letters, tailor CVs, prepare interviews and score job matches for youContract
Voice interviews: audio recording and written transcript of your calls with Maya, plus the summary Maya writes from themTo learn about your experience so every application is built from what you actually saidContract (you start the interview and tick the recording consent first)
Job postings you import or search for, applications you generate, their statusTo run the product and keep your pipeline in one placeContract
Connected inbox (optional, only if you connect Gmail): message metadata and application-related emailsTo update your application statuses automaticallyConsent (you can disconnect at any time)
Billing: Stripe customer id, plan, renewal date, credit balance. Card details never reach usTo manage your subscription and creditsContract and legal obligation (accounting)
Networking contacts: people you save from LinkedIn, and public professionals Vouch suggests (name, role, company, public profile link, a public detail to open a conversation)To help you find and reach relevant people for your job searchLegitimate interest (see section 5a)
Product usage: which features you use, request counts, error idsTo keep the service reliable, enforce fair-use limits and fix bugsLegitimate interest (running a stable service)
Analytics and advertising cookies (PostHog, Meta Pixel)To understand how the site is used and to measure our own advertsConsent, via the cookie banner

Special-category data (Article 9): your CV, cover letters and interview answers are free text you write, and they may happen to reveal sensitive things such as health, religion, ethnicity or trade-union membership (for example a career gap, a faith-based employer or a diversity statement). We do not ask for this and we do not use it to profile you; it is processed only as an incidental part of the document you asked us to help with. Where such data is present, our basis is your explicit consent, given when you upload the document or start the interview. You can remove it at any time by editing or deleting the document, or delete everything by deleting your account.

3. Voice interviews with Maya

Maya is an AI. She tells you so at the start of every call. Calls run through Vapi (the voice platform) with speech synthesis by ElevenLabs and transcription by Deepgram. The audio is recorded and transcribed so Maya can write the summary and so your applications can draw on what you said.

You are not graded or judged. Nobody else listens to the call. The recording and the transcript belong to your account: they are never sold, never shared with employers, and never used to train AI models for anyone else.

If you take the free interview on the landing page before creating an account, we keep your name, email and the call transcript for 90 days so you can claim the summary when you sign up. After 90 days unclaimed interviews are deleted.

4. AI processing

The writing, matching and interview logic uses large language models from Anthropic. Your documents, transcripts and job postings are sent to Anthropic's API only to produce your results. Under Anthropic's commercial terms that data is not used to train their models. Maya writes only from what you have told her or uploaded: we do not invent employers, titles, tools or achievements, and you review everything before it leaves the app.

5. Who we share data with (processors)

We do not sell personal data. We use the following providers to run the service, each under a data-processing agreement and only for the purpose listed:

ProviderPurposeWhere
SupabaseDatabase, authentication and file storageEU (Frankfurt)
VercelHosting of the website and APIEU/US edge network
AnthropicAI language modelsUS
Vapi, ElevenLabs, DeepgramVoice calls, speech synthesis, transcriptionUS
TwilioPhone calls when Maya rings your phoneUS/EU
StripePayments and subscriptionsEU/US
BrevoTransactional email (summaries, receipts, account emails)EU (France)
PostHogProduct analytics, only after consentEU (Frankfurt)
MetaAdvertising measurement (Meta Pixel), only after consentUS/EU
GoogleGmail access, only if you connect your inboxUS/EU
PerplexityCompany research for interview prep (company name and public job details)US

Where a provider processes data outside the UK or EEA, transfers rely on the UK International Data Transfer Addendum or the EU Standard Contractual Clauses, and on the UK-US Data Bridge or EU-US Data Privacy Framework where the provider is certified.

To find live job openings we send your search terms (such as a job title, location and keywords, derived from your profile) to job-board APIs including Adzuna, Reed, Jooble, JSearch, Jobindex and The Hub. These receive a query, not your CV or your identity, and they are job data sources rather than processors of your account.

5a. Networking contacts and other people

The networking feature helps you build a shortlist of people to reach out to. Some entries you add yourself by saving a profile you are viewing; others Vouch suggests by searching public web sources (company pages, press releases, public profiles) for people who fit your target roles. In both cases we store only what is publicly available and useful for an introduction: name, role, company, a public profile link and one public detail.

Our basis for this is legitimate interest: helping you network is core to a job-search tool, the data is professional and public, and it is used only inside your own private shortlist and never sold or shared. Suggestions that you never act on are deleted automatically after 30 days. If you are one of these professionals and want to know what we hold or have it removed, email support@myvouch.io and we will action it.

6. Cookies and similar technologies

On your first visit you see a cookie banner with two equal choices, Accept and Decline. Your choice is stored in your browser and you can change it at any time via in the footer.

CategoryWhat it doesRuns when
Strictly necessaryKeeps you signed in (Supabase auth session), remembers your cookie choice, protects formsAlways
Analytics (PostHog, EU)Page views and feature usage. No session recording, all text masked, no CV contentOnly after Accept
Advertising (Meta Pixel)Tells Meta that an advert led to a visit or a signup, so we can measure our own campaignsOnly after Accept

If you decline, no analytics or advertising script loads and no analytics or advertising cookie is set. The product works exactly the same.

7. How long we keep data

DataRetention
Account, profile, documents, applications, interviewsFor as long as your account exists. Deleted when you delete your account
Unclaimed landing-page interviews90 days after the call
Networking suggestions you never acted on30 days after they are suggested
Billing records (invoices, payments)5 years after the financial year, as required by Danish accounting law. These contain your name, email and the amounts, not your documents
Usage and error logs90 days
Analytics (PostHog), if accepted12 months
BackupsDeleted data leaves our backups within 30 days

8. Deleting your account

You can delete your account yourself: open Settings, scroll to Delete account, type DELETE and confirm. This removes your profile, documents, cover letters, CVs, applications, interview recordings, transcripts and summaries, job matches, networking data, coaching data, settings and uploaded files, and your login. An active subscription is cancelled first so nothing renews. We send one confirmation email and then keep only what accounting law requires (see above).

At the same time the call recordings and transcripts are deleted at the voice provider (Vapi), your contact is deleted at the email provider (Brevo), and if you had connected Gmail the access is revoked at Google. Analytics data (PostHog), if you accepted it, is deleted or anonymised within 12 months of the deletion. If one of these providers is unreachable at that moment, I follow up by hand.

You can also email support@myvouch.io and I will do it for you within 7 days.

9. Your rights

Under the UK GDPR (and the EU GDPR if you are in the EEA) you can ask to access, correct, export or delete your data, restrict or object to processing, and withdraw consent at any time. Most of this you can do directly in the app: edit your profile, delete documents, download a machine-readable export of your data from Settings, disconnect your inbox, change cookie settings, delete your account. For anything else, email the address above; I reply within 30 days.

If you are unhappy with how we handle your data you can complain to the UK Information Commissioner's Office (ico.org.uk) or, in Denmark, to Datatilsynet (datatilsynet.dk).

10. Security

Data is encrypted in transit (TLS) and at rest. Access to your data is restricted by row-level security so you only ever see your own records. Card details are handled by Stripe and never touch our servers. Uploaded files live in a private bucket that is not publicly reachable.

11. Children

Vouch is for people looking for work and is not intended for anyone under 16.

12. Changes

When this policy changes in a way that matters, we tell you in the app or by email before it takes effect. The date at the top shows the current version. See also our Terms and Refund Policy.


Vouch is operated by mimoco ApS, Danish company reg. (CVR) 39127709, VAT DK39127709, Turistvej 177, 3460 Birkerød, Denmark. Questions: support@myvouch.io.