Privacy Policy

1. Introduction

Vouch ("we," "our," or "us") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile applications, and services (collectively, the "Services").

This policy complies with the Protection of Personal Information Act (POPI) of South Africa and the General Data Protection Regulation (GDPR) of the European Union.

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

• Name and contact information (email address, phone number)
• Account credentials and authentication information
• Payment and billing information
• Transaction history and voucher usage data
• Device information and technical data
• Location data (with your consent)
• Communications and feedback

2.2 Automatically Collected Information

We automatically collect certain information when you use our Services:

• IP address and device identifiers
• Browser type and version
• Operating system information
• Usage patterns and preferences
• Cookies and similar tracking technologies

3. How We Use Your Information

We do not sell your personal information to third parties. We use your information for the following purposes:

• To provide, maintain, and improve our Services
• To process transactions and manage your account
• To communicate with you about our Services
• To personalize your experience
• To analyze usage patterns and improve our platform
• To detect, prevent, and address technical issues and fraud
• To comply with legal obligations
• To send you marketing communications (with your consent)

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your personal information based on:

• Contract: To fulfill our contractual obligations to you
• Legitimate Interest: To improve our Services and prevent fraud
• Consent: For marketing communications and optional features
• Legal Obligation: To comply with applicable laws and regulations

5. Information Sharing and Disclosure

We may share your information in the following circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our Services
• Business Partners: With vendors and merchants participating in our platform
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In connection with mergers, acquisitions, or asset sales
• Consent: With your explicit consent for specific purposes

We never sell your personal information for commercial purposes.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against:

• Unauthorized access, use, or disclosure
• Accidental loss or destruction
• Malicious attacks and data breaches

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. When we no longer need your information, we will securely delete or anonymize it.

8. Your Rights

8.1 POPI Rights (South African Users)

Under POPI, you have the right to:

• Access your personal information
• Correct or update inaccurate information
• Object to the processing of your information
• Request deletion of your information
• Submit complaints to the Information Regulator

8.2 GDPR Rights (EU Users)

Under GDPR, you have additional rights including:

• Data portability
• Restriction of processing
• Right to be forgotten
• Right to withdraw consent
• Right to lodge complaints with supervisory authorities

To exercise these rights, please contact us at privacy@vouch.co.za

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards.

10. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze usage, and provide personalized content. You can manage your cookie preferences through your browser settings.

11. Children's Privacy

Our Services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on our website and updating the "Last updated" date. Your continued use of our Services after such changes constitutes acceptance of the updated policy.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

14. Regulatory Information

South African Users: For complaints or concerns about our data practices, you may contact the Information Regulator of South Africa at www.justice.gov.za/inforeg/

EU Users: You have the right to lodge a complaint with your local data protection authority. A list of EU data protection authorities is available at edpb.europa.eu