Privacy Policy
Last updated 31 October 2026
What we collect
If you join the candidate pool: your name, your email address, your phone number, your LinkedIn profile link and, if you add them, your GitHub and X profiles; the city you live in and whether you will need visa sponsorship; where you are now (student, working or between roles) and, for students, the year you graduate; and what you tell us you are looking for (the kind of work, the role, when you can start and, if you choose to add them, a salary range, companies you like and a note). If you ask our AI agent to call you: the recording of the call, its transcript and what you tell the agent, which can cover your work, your schooling, what you want next, why you are looking, the pay you want, where you want to work and whether you need visa sponsorship. If you join the pool, we may also get the profile that goes with your LinkedIn link, from data providers (People Data Labs, Crustdata or Bright Data), or from your LinkedIn profile itself: your name, profile picture (we keep a copy of it), work history, schools, skills, location and GitHub and X profiles. If we have your GitHub profile link, we may also get your public GitHub profile and repositories from GitHub: your name, bio, website, X profile, the languages and topics of your own repositories and the most starred of them. If you were referred, or refer someone through our referral program: who referred whom (from the referral link, or the name or email typed in "Who referred you?") and when, to pay the referral; a referral link shows the friend you send it to your first name and the initial of your last name. If you agree to reference checks: the names of people you worked with and what they tell us about working with you, such as strengths, concerns, whether they would work with you again, and a quote if they agree to one. If you are asked to be a reference: your name, your LinkedIn or GitHub profile, where you worked with that person, and what you tell us. When you join the pool, we also note how you reached the site: the source named in the link you followed (such as "linkedin") and the name of the website that sent you (such as www.linkedin.com), never the page or anything else in the address, so our team can count where people come from. If you send us a hiring brief: your name, company, work email, phone number and the role. If your company's job posting publishes a contact address, we keep it and the emails we send to it, to introduce Vouch to your company and to tell it how many people in our pool fit its roles, never who they are; we never buy contact lists. Reply "stop" to one of our emails, or ask us, and we will not write to that address again, and we keep a scrambled form of it so that we never do. There is no tracking pixel. If we meet you at an event or on a call: notes our team takes about what you told us, sometimes as a transcript of our conversation. They can include where you have worked and when, where you studied, where you live, your biggest accomplishment, your GitHub and X profiles, your skills, the role and kind of company you want, where you want to work, pay and whether you need visa sponsorship.
Why we collect it
So a person can get in touch with you about a role. That is the only use. We do not sell your details, and we do not add you to a marketing list.
Where it goes
Submissions are delivered by email to firas@use-vouch.co through Resend, our email provider, and read by the Vouch team. If you join our pool, what you send is also kept in our own database, in a private talent pool that only the Vouch team can open, so we can come back to you when a role fits. If you are in our pool and we have your LinkedIn profile link, we may send that link, and nothing else, to data providers for the profile that goes with it (your name, profile picture, work history, schools, skills, location and GitHub and X profiles), and keep what they send in that talent pool: People Data Labs and Crustdata answer from the profiles they hold, and Bright Data reads your public LinkedIn page for us, without signing in. Or we may read your LinkedIn profile at that link ourselves, either without signing in, fetching it through a web-access provider that receives only that link, or in a browser of our team's that is signed in to LinkedIn, which opens your profile and its experience and education pages as that account can see them; either way we have Anthropic, our AI provider, write out the same details from it to keep in that talent pool. When LinkedIn does not show us the page, we may instead send only that link to Anthropic for a web search of LinkedIn, and keep what the search shows about you. If you are in our pool and we have your GitHub profile link, we may ask GitHub for your public profile and repositories, sending it only your GitHub username, and keep what it shows in that talent pool. To find the GitHub profile of someone in our pool who has not given us one, we may send GitHub their name, and nothing else, to search its users; a profile is only saved once our team confirms it is theirs. If you agree to reference checks, we look for people you worked with in our own talent pool and among the people who committed to your public GitHub repositories. GitHub receives your GitHub username and the names of your repositories. We may also use Crustdata, which receives the names of companies you worked at and never your name or contact details. We keep what references tell us in our private talent pool, which only the Vouch team can open, and share a reference's words with a company only if that person agrees. When we run a search, the details of the people we put forward are kept in our own database and shown to that client on a private page that only their team can open. If you joined our pool, we may put you forward by name to a company we hire for when we think you're a strong fit, never to a company you've hidden, and you can ask us to stop at any time. When a company describes a role through the role interview on its page, the answers it types there are processed by Anthropic, our AI provider, to draft the role. When we meet you at an event or on a call, the notes our team writes about what you told us, transcripts included, are also processed by Anthropic, to file them in a private talent pool that only the Vouch team can open and to search it when we look for someone or match it against the roles our clients are hiring for; no company sees it. A search sends Anthropic the words our team searches with and what our notes say about your work, your schooling, where you live, whether you need sponsorship, whether we have spoken with you yet and what you want; it never adds the name, email or phone we hold for you. To find the LinkedIn profile of someone we met, we may send Anthropic their name and the company, school and city our notes give, for a web search of LinkedIn; it never adds an email or phone, and a profile is only saved once our team confirms it is theirs. We also match the pool against companies we follow, hiring or not, and their public job postings, which we read from the company's own careers page or from Google Jobs, or get from our data providers, and against open roles at other companies that we find through Crustdata or on Google Jobs. To find and follow those companies we use Crustdata or Apollo, which receive the company's name, website or id and a job title. When we look for companies that could suit you, they also receive the kind of role you want, up to five of your skills and the company stages you prefer, and never your name, your contact details or anything else about you. To read open roles from Google Jobs we use SerpApi, which receives a company's name or a city and a kind of role, and never anything about you. To find those open roles we use Crustdata, which receives a kind of role, a place and the size and type of company, and never anything about you.
Calls with our AI agent
If you tap Call me now, our AI agent calls the number you gave right away; we call no number unless someone asks for it on our site. We tell you before you ask, and the agent tells you again as it begins, that it is an AI and that the call is recorded and transcribed; asking for the call is your agreement to that. The call runs through Retell, our voice provider, and the phone carrier it uses. The agent is told your first name and the role you picked and, so that it does not ask what you have already told us, what our talent pool holds about your work, your schooling and what you want next; never your email, your phone number or our notes. It saves your answers to the pool as you give them. The agent's words are written by Claude, Anthropic's AI model, which Retell runs for the call, and Anthropic, our AI provider, reads the transcript afterwards to file what you said in our private talent pool. We keep the recording and its transcript there, where the Vouch team can open them; if we put you forward to a company for a role, that company's team can also hear the recording and read the transcript. We delete Retell's copy once we have ours, and Retell keeps it for seven days at most; we also have Retell delete the contact record it makes for your number, unless you asked not to be called again, in which case Retell keeps the number marked do-not-call. Say "stop calling" on a call and that number is never called again; to keep to that, we hold a scrambled form of the number, never the number itself, even after we delete everything else. You can end the call at any time, and ask us to delete the recording and transcript.
Your own page
You can sign up with an email and a password, and sign in to your own page with that password or a link we email you; we keep only a scrambled form of the password, the link and your session, and for a day a scrambled form of the internet address a sign-up came from, to stop abuse. If your email is already in our pool, your page is the profile we hold for it, once you have opened the link we send to that address. There you can tell us about your career, what you want next and which companies must never see you, and we use that to match you to roles and to keep you from those companies, on our clients' pages and in our emails to companies alike. If you upload a CV to tailor it to a job, Anthropic, our AI provider, reads its text once, with every email address, phone number and web address taken out, and we never keep the file; Anthropic also reads what you write to Hailey, our AI agent, with your profile and your jobs, and we keep neither. If you ask us to introduce you to a company that hires through us, that company's team sees your name, the headline and summary on your page and the note you wrote. We may also put you forward to a company we hire for when we think you're a strong fit, with your name and profile; we never do this to a company you've hidden, and you can ask us to stop at any time.
Automated decisions
Software helps us search and rank, drafts our notes and, if you ask our AI agent to call you, holds that first conversation with you. A person reviews every shortlist before a company sees it, and nobody is put forward or turned away by software alone. If that changes, we will update this page before it does, not after.
Cookies and analytics
We use Vercel Web Analytics to count visits and form opens and submissions in aggregate. It uses no cookies, does not follow you across sites, and never receives what you type into a form. We also use two product analytics providers to see how people use our pages, which may include recordings of your visit: ELU Analytics on this public site, and PostHog on this site and on the private pages where companies see their shortlists and where we keep our talent pool. In PostHog's recordings, everything typed into the candidate form and on your Tell us more page is hidden, as are all the words on that page, and on the private pages every word, field and picture is hidden, so they show where people click and which pages they open, never a candidate's name or details; a recording can show what is typed about the company and the role in a hiring brief, never the name, email or phone in it. PostHog never receives the words on what you click, a page's title, or the part of an address after the page, such as a private link's code, and knows someone signed in only as our team or a company's team, never by name or email. Each may store an identifier in your browser to recognise a return visit; PostHog sets no cookie. ELU never runs on the private pages. No advertising, and no other third-party scripts.
Keeping and deleting it
We keep your details, and the recording and transcript of a call with our AI agent, until you ask us not to. Email firas@use-vouch.co and we will delete them within one business day and confirm that we have. You can also ask for a copy of everything we hold about you.
Contact
Any question about this policy goes to firas@use-vouch.co and a person will answer it.