Privacy Policy
Last updated: 3 September 2026
In short
- Your interview recordings and transcripts are used to write your applications, nothing else. They are never sold and never used to train AI for anyone else.
- Analytics (PostHog) and the Meta Pixel only run after you click Accept in the cookie banner. Decline and only the strictly necessary cookies are set.
- You can delete your account and every piece of data attached to it yourself, from Settings, at any time.
- Questions or requests: support@myvouch.io.
The summary is here to help you read. The full text below is what applies.
This policy explains what personal data Vouch processes, why, for how long, and the rights you have. It applies to myvouch.io, the Vouch web app, the browser extension, and the voice interviews with Maya.
1. Who is responsible
The data controller is mimoco ApS (trading as Vouch), Danish company reg. (CVR) 39127709, Turistvej 177, 3460 Birkerød, Denmark. Contact: support@myvouch.io.
mimoco ApS is established in Denmark and offers Vouch to people in the United Kingdom. A UK representative under Article 27 of the UK GDPR is being appointed; the name and contact details will be published here as soon as that is in place. Until then, please direct all requests to the email above.
2. What we collect and why
| Data | Why we process it | Legal basis |
|---|---|---|
| Account: email, password (hashed), or your LinkedIn login identity | To create and secure your account and to contact you about it | Contract |
| Profile: name, phone, location, summary, CV and other documents you upload, writing samples, style rules | To write cover letters, tailor CVs, prepare interviews and score job matches for you | Contract |
| Voice interviews: audio recording and written transcript of your calls with Maya, plus the summary Maya writes from them | To learn about your experience so every application is built from what you actually said | Contract (you start the interview and tick the recording consent first) |
| Job postings you import or search for, applications you generate, their status | To run the product and keep your pipeline in one place | Contract |
| Connected inbox (optional, only if you connect Gmail): message metadata and application-related emails | To update your application statuses automatically | Consent (you can disconnect at any time) |
| Billing: Stripe customer id, plan, renewal date, credit balance. Card details never reach us | To manage your subscription and credits | Contract and legal obligation (accounting) |
| Networking contacts: people you save from LinkedIn, and public professionals Vouch suggests (name, role, company, public profile link, a public detail to open a conversation) | To help you find and reach relevant people for your job search | Legitimate interest (see section 5a) |
| Product usage: which features you use, request counts, error ids | To keep the service reliable, enforce fair-use limits and fix bugs | Legitimate interest (running a stable service) |
| Analytics and advertising cookies (PostHog, Meta Pixel) | To understand how the site is used and to measure our own adverts | Consent, via the cookie banner |
Special-category data (Article 9): your CV, cover letters and interview answers are free text you write, and they may happen to reveal sensitive things such as health, religion, ethnicity or trade-union membership (for example a career gap, a faith-based employer or a diversity statement). We do not ask for this and we do not use it to profile you; it is processed only as an incidental part of the document you asked us to help with. Where such data is present, our basis is your explicit consent, given when you upload the document or start the interview. You can remove it at any time by editing or deleting the document, or delete everything by deleting your account.
3. Voice interviews with Maya
Maya is an AI. She tells you so at the start of every call. Calls run through Vapi (the voice platform) with speech synthesis by ElevenLabs and transcription by Deepgram. The audio is recorded and transcribed so Maya can write the summary and so your applications can draw on what you said.
You are not graded or judged. Nobody else listens to the call. The recording and the transcript belong to your account: they are never sold, never shared with employers, and never used to train AI models for anyone else.
If you take the free interview on the landing page before creating an account, we keep your name, email and the call transcript for 90 days so you can claim the summary when you sign up. After 90 days unclaimed interviews are deleted.
4. AI processing
The writing, matching and interview logic uses large language models from Anthropic. Your documents, transcripts and job postings are sent to Anthropic's API only to produce your results. Under Anthropic's commercial terms that data is not used to train their models. Maya writes only from what you have told her or uploaded: we do not invent employers, titles, tools or achievements, and you review everything before it leaves the app.
5. Who we share data with (processors)
We do not sell personal data. We use the following providers to run the service, each under a data-processing agreement and only for the purpose listed:
| Provider | Purpose | Where |
|---|---|---|
| Supabase | Database, authentication and file storage | EU (Frankfurt) |
| Vercel | Hosting of the website and API | EU/US edge network |
| Anthropic | AI language models | US |
| Vapi, ElevenLabs, Deepgram | Voice calls, speech synthesis, transcription | US |
| Twilio | Phone calls when Maya rings your phone | US/EU |
| Stripe | Payments and subscriptions | EU/US |
| Brevo | Transactional email (summaries, receipts, account emails) | EU (France) |
| PostHog | Product analytics, only after consent | EU (Frankfurt) |
| Meta | Advertising measurement (Meta Pixel), only after consent | US/EU |
| Gmail access, only if you connect your inbox | US/EU | |
| Perplexity | Company research for interview prep (company name and public job details) | US |
Where a provider processes data outside the UK or EEA, transfers rely on the UK International Data Transfer Addendum or the EU Standard Contractual Clauses, and on the UK-US Data Bridge or EU-US Data Privacy Framework where the provider is certified.
To find live job openings we send your search terms (such as a job title, location and keywords, derived from your profile) to job-board APIs including Adzuna, Reed, Jooble, JSearch, Jobindex and The Hub. These receive a query, not your CV or your identity, and they are job data sources rather than processors of your account.
5a. Networking contacts and other people
The networking feature helps you build a shortlist of people to reach out to. Some entries you add yourself by saving a profile you are viewing; others Vouch suggests by searching public web sources (company pages, press releases, public profiles) for people who fit your target roles. In both cases we store only what is publicly available and useful for an introduction: name, role, company, a public profile link and one public detail.
Our basis for this is legitimate interest: helping you network is core to a job-search tool, the data is professional and public, and it is used only inside your own private shortlist and never sold or shared. Suggestions that you never act on are deleted automatically after 30 days. If you are one of these professionals and want to know what we hold or have it removed, email support@myvouch.io and we will action it.
7. How long we keep data
| Data | Retention |
|---|---|
| Account, profile, documents, applications, interviews | For as long as your account exists. Deleted when you delete your account |
| Unclaimed landing-page interviews | 90 days after the call |
| Networking suggestions you never acted on | 30 days after they are suggested |
| Billing records (invoices, payments) | 5 years after the financial year, as required by Danish accounting law. These contain your name, email and the amounts, not your documents |
| Usage and error logs | 90 days |
| Analytics (PostHog), if accepted | 12 months |
| Backups | Deleted data leaves our backups within 30 days |
8. Deleting your account
You can delete your account yourself: open Settings, scroll to Delete account, type DELETE and confirm. This removes your profile, documents, cover letters, CVs, applications, interview recordings, transcripts and summaries, job matches, networking data, coaching data, settings and uploaded files, and your login. An active subscription is cancelled first so nothing renews. We send one confirmation email and then keep only what accounting law requires (see above).
At the same time the call recordings and transcripts are deleted at the voice provider (Vapi), your contact is deleted at the email provider (Brevo), and if you had connected Gmail the access is revoked at Google. Analytics data (PostHog), if you accepted it, is deleted or anonymised within 12 months of the deletion. If one of these providers is unreachable at that moment, I follow up by hand.
You can also email support@myvouch.io and I will do it for you within 7 days.
9. Your rights
Under the UK GDPR (and the EU GDPR if you are in the EEA) you can ask to access, correct, export or delete your data, restrict or object to processing, and withdraw consent at any time. Most of this you can do directly in the app: edit your profile, delete documents, download a machine-readable export of your data from Settings, disconnect your inbox, change cookie settings, delete your account. For anything else, email the address above; I reply within 30 days.
If you are unhappy with how we handle your data you can complain to the UK Information Commissioner's Office (ico.org.uk) or, in Denmark, to Datatilsynet (datatilsynet.dk).
10. Security
Data is encrypted in transit (TLS) and at rest. Access to your data is restricted by row-level security so you only ever see your own records. Card details are handled by Stripe and never touch our servers. Uploaded files live in a private bucket that is not publicly reachable.
11. Children
Vouch is for people looking for work and is not intended for anyone under 16.
12. Changes
When this policy changes in a way that matters, we tell you in the app or by email before it takes effect. The date at the top shows the current version. See also our Terms and Refund Policy.
Vouch is operated by mimoco ApS, Danish company reg. (CVR) 39127709, VAT DK39127709, Turistvej 177, 3460 Birkerød, Denmark. Questions: support@myvouch.io.