At Vouch, we care about your privacy. In this privacy policy, we explain what personal data we collect, process, and share with others when you use Vouch.
Vouch AS (Org No. 930 248 096) is the data controller for all user profiles on Vouch. In connection with specific job assignments, Vouch acts as a data processor on behalf of the company seeking candidates. Vouch is also the data controller for processing user information about corporate customers.
If you have any questions about this privacy policy or our processing of personal data, you can email us at hey@vouch.careers.
Personal data refers to information and assessments that can be directly or indirectly linked to an identifiable individual. This can include name, address, phone number, email address, CV details, IP address, or job application history. Processing of personal data—such as collection, registration, storage, and disclosure—is subject to the Personal Data Act and the General Data Protection Regulation (GDPR).
For Referrers
To refer someone, you must create a user account on Vouch. We use this personal data to contact the candidate you have referred and later, if applicable, for referral reward payment. Vouch will request your account information for payment if your referred candidate is hired and all conditions are met.
After creating an account, you may provide additional information—for example, if you want to be considered as a candidate yourself. Our legal basis for processing data about referrers is the agreement (Terms of Use) between the referrer and Vouch. We will process your data as long as the agreement remains valid.
For Referred Candidates
If you are referred, the referrer will provide Vouch with some of your personal data. This includes your name, email and/or phone number, LinkedIn profile, and an assessment of you as a potential candidate. The purpose of processing this data is to contact you and assess your suitability for a specific position.
The employer has a legitimate interest in using this data for a short period until they, or Vouch on their behalf, contact you to ask if you want to be considered for the position (cf. GDPR Article 6(1)(f)). Since this contact may lead to a new job opportunity for you, the processing also benefits you. You will have a quick opportunity to object to the processing. Altogether, our interests outweigh the potential privacy drawbacks.
If the employer finds that you are not a suitable candidate, or if you do not want to be considered, Vouch will delete your data related to that job position on behalf of the employer immediately.
If you're interested in the job, you’ll need to create an account.
Candidates may also consent to be considered for other roles through Vouch. The legal basis is consent, which can be withdrawn at any time.
For Candidates Applying Independently
If you apply for a job on vouch.careers without being referred, a user account will be created linked to your email address. Vouch is the data controller for this account, and you can claim ownership at any time to edit, supplement, or delete your data.
This gives you full control over who can access your data. Instead of your applications being stored indefinitely in employer systems, Vouch allows you to manage which companies have access—and to revoke access whenever you like.
When you apply, your data is transferred to the employer, who becomes the data controller. Vouch then acts as a data processor, handling application data under the employer’s instructions. However, you can still withdraw your application and request deletion via your user account—this will also remove it from the employer’s view. You don’t need to contact the employer directly to exercise your rights.
You can create a Vouch account in four ways: via LinkedIn, Google, GitHub, or by entering your email and receiving a "magic link." If you choose a social login, your registration/login request is sent to LinkedIn, Google, or Meta Platforms before Vouch grants you access. In these cases, Vouch shares data controller responsibility. If you register via email, Vouch is solely responsible. For their processing of your data, refer to their privacy policies.
The purpose is authentication and security. The legal basis is the agreement (Terms of Use) between the user and Vouch. We will process your data as long as the agreement is valid.
To use the Vouch platform—or to post jobs and receive applicants through our customer portal—you need a user account.
Vouch is the data controller for processing related to your account. We process the following:
Name
Phone number
Photo
CV details
Job history
The purpose is to manage your account so you can easily refer others or apply for jobs. The legal basis is the agreement (Terms of Use). Data is processed as long as the agreement is valid.
Vouch sends newsletters 1–2 times per week. When registering, you’ll have the option to consent to receive them. You can withdraw consent at any time via "Profile Settings."
If you consent, your contact details (name, email, phone number, and consent history) will be stored in our newsletter database. This is necessary to document your consent. We’ll retain this data as long as you’re subscribed.
Cookies
We use cookies to collect statistics about how the site and subdomains are used. You can choose to allow only necessary cookies or also optional ones.
When you visit the site, a temporary cookie is created to check if your browser accepts cookies. This cookie contains no personal data and is deleted when you close the browser.
Login cookies store your login details and display preferences. Login cookies expire after 2 days, display preferences after 1 year. If you check "Remember me," login details are kept for 2 weeks. Logging out removes these cookies.
Cookies Used:
Cookie | Purpose | Personal Data | Retention | Legal Basis |
| Stores language preference | None | Session | Legitimate interest |
| Prevents malicious code | None | Session | Legitimate interest |
| Prevents malicious code | None | Session | Legitimate interest |
| Analytics via PostHog | None | Up to 1 year | Legitimate interest |
| Chat feature ID | None | Up to 12 months | Legitimate interest |
| Unique user ID | None | Up to 2 years | Legitimate interest |
| Unique user ID | None | Up to 2 years | Legitimate interest |
Third-Party Content
Vouch integrates third-party content, including “Pixels” from platforms like Facebook, Instagram, and LinkedIn. These send visitor and device data to the Pixel owner when you visit our site.
These platforms may collect data about you, use cookies, embed tracking systems, and monitor your activity—even if you're logged into those platforms.
Vouch uses Pylon Labs, Inc. to provide chat support. When using chat, identifiers and message content are processed as part of our support interactions. Pylon stores this data in the U.S., using EU Standard Contractual Clauses (SCCs) and the UK Addendum. You can request deletion of messages or IDs at any time by emailing hey@vouch.careers.
We have a legitimate interest in responding to inquiries, which also benefits you. Our interest outweighs any privacy inconvenience (GDPR Article 6(1)(f)).
This section applies to users who connect their Google account to Vouch for booking interviews or related scheduling features.
Types of Google data we access When you connect your Google account, Vouch accesses Google Calendar data limited to:
Calendar events you create or update via Vouch (title, description, start/end, attendees, conference info).
Free/busy information to determine availability across calendars you select.
Your calendar list to let you choose which calendar(s) to use. We also process your basic profile info for sign-in (OpenID, email, profile).
How we use this data We use Google Calendar data solely to provide the interview scheduling functionality: creating events, generating Google Meet links, rescheduling, canceling, and checking availability across calendars you select.
AI/ML usage disclosure (Workspace APIs) Our AI/ML systems do not train on any personal data obtained via Google APIs. Any automated processing is only used in real time to operate or improve the scheduling feature. We do not build or enhance generalized models using Google Workspace API data.
Limited Use compliance Vouch complies with Google’s API Services User Data Policy, including the Limited Use requirements. Google user data obtained through Google APIs is used only to provide and improve the scheduling feature, is not sold, is not transferred except to service providers as necessary to provide the feature, and is not used for advertising (including retargeting, personalized, or interest-based ads). Human access to Google data is prohibited except with your consent, to comply with applicable law, or for security/abuse investigations.
Data storage & security
Data in transit and at rest is encrypted.
Access is restricted to authorized personnel on a need-to-know basis; access is logged and audited.
Secrets and tokens are stored securely; refresh tokens are encrypted.
We follow least-privileged access, periodic key rotation, and vulnerability management practices.
Retention & deletion
Calendar event data created/updated via Vouch is retained only as needed to provide the service and for audit/security logs.
If you revoke Google access or delete your account, we stop accessing your data immediately and delete stored Google-derived data within 30 days (logs may persist for up to 90 days for security and compliance).
You can request deletion at any time at support@vouch.careers.
Sharing We do not share Google user data with third parties except subprocessors that help us deliver the feature under data processing agreements and consistent with this policy and Google’s Limited Use requirements.
Your choices You may disconnect Google at any time via Google Account → Security → Third-party access. After disconnection we cannot create or modify events or read free/busy.
Contact For questions or deletion/export requests: support@vouch.careers.
Vouch uses AI and machine learning to match candidates with jobs, rank applications, and make the recruitment process more efficient. The processing is based on the agreement with the user and Vouch’s legitimate interest in providing a quality service.
Our models analyze CVs, application texts, and other relevant information to calculate a match score. Personal data is only used for real-time evaluation – it is not used to train general AI models.
We use automated processing and profiling to prioritize candidates, but all hiring decisions are made by humans. No automated decisions have legal or similarly significant effects for the user.
The models are regularly tested for bias and corrected as needed. All data and results are stored securely and encrypted. If you have questions about how AI affects your application, contact us at hey@vouch.careers. You cannot opt out of automated ranking.
Vouch shares personal data with the following recipients:
Clients, employers, and customers
Candidates
Google LLC
Meta Platforms, Inc.
LinkedIn Ireland Unlimited Company
Retool, Inc.
Pylon
PostHog
Unify AI Business Corporation
Snitcher
We use subprocessors that may process data outside the EEA. All such transfers comply with Chapter V of the GDPR.
Subprocessor | Country | Transfer Mechanism |
Google LLC | USA | EU-U.S. Data Privacy Framework |
Meta Platforms, Inc. | USA | EU-U.S. Data Privacy Framework |
Retool, Inc. | USA | EU Standard Contractual Clauses |
Pylon | USA | EU Standard Contractual Clauses + UK Addendum |
Unify AI Business Corporation | USA | EU Standard Contractual Clauses + UK Addendum |
You have the following rights under data protection law:
Right to access your data
Right to correct inaccurate data
Right to delete your data
Right to restrict processing
Right to data portability
Right to object
Right to withdraw consent
Right to file a complaint with the Data Protection Authority
i) Access and Data Portability
You can access your data by creating an account on Vouch. If you don’t want to create one, you can email hey@vouch.careers with your name and phone number. This also applies to portability requests.
Correction, Deletion, Restriction
You can edit your data via “My Settings.” If you believe we have incorrect data about you or want to restrict processing, email us at hey@vouch.careers.
If you don’t have an account but wish to delete, correct, or restrict your data, email us.
Right to Object
You can object to data processing based on legitimate interests. We’ve specified where we rely on this basis. If you object, we must demonstrate compelling legitimate grounds to continue processing.
If you object to direct marketing, your data will no longer be used for that purpose.
Withdrawal of Consent
You can withdraw your consent at any time via “Profile Settings.” If you have issues, email us at hey@vouch.careers and we’ll assist you.
Complaints
You can file a complaint about our data processing with the Norwegian Data Protection Authority. See www.datatilsynet.no.
In the event of a business transfer or other corporate/legal restructuring, data controller responsibility under this privacy policy may change.
We may update or change this policy from time to time and will notify you as necessary.