1Who we are
VouchHive is operated by [LEGAL ENTITY NAME], [REGISTERED ADDRESS] ("we", "us"). We are the controller of the personal data described in this policy. For any privacy question or request, contact us at [CONTACT EMAIL].
2Data we collect
| Category | What it includes | Source |
|---|---|---|
| Account | Name, email, password (stored only as a secure hash), country, interests, role, signup date, email verification and terms acceptance dates, referral code and who referred you. For companies: your name, company name, website, logo and description. | You |
| Security and fraud prevention | IP address at signup and per session, a hashed device and browser fingerprint (derived from your user agent), login times and an audit trail of sensitive actions such as wallet changes and withdrawals. | Your device, automatically |
| Payout data | Your USDT wallet address and network, balance, ledger entries, withdrawal requests and blockchain transaction IDs. | You and us |
| Test and review content | Spots you requested, reviews, ratings, answers to test questions, screenshots you upload, your replies and reactions in the community, and company replies. | You |
| Contact data (optional) | A phone number or messaging handle, only if you choose to give it (for example in a quote request). | You |
| Communications | Emails we send you (such as verification and password reset), in-app notifications and messages you send to support. | You and us |
3Why we use it and our legal bases
- To provide the Service (accounts, tests, spot allocation, reviews, payouts, business portal): performance of our contract with you.
- To prevent fraud and keep reviews honest (detecting duplicate accounts, coordinated ratings and misuse of test logins, securing accounts): our legitimate interest in protecting testers, companies and readers, and where applicable legal obligations.
- To publish reviews with your first name, last initial and the "Verified tester, compensated" label: performance of our contract and our legitimate interest in transparent reviews.
- To pay you and keep accounting records: performance of our contract and our legal obligations (accounting, tax, anti-money laundering where applicable).
- To communicate with you about your account, tests and changes to our terms: performance of our contract and legitimate interest.
- To improve the Service using aggregated, non-identifying statistics: legitimate interest.
5International transfers
Our providers may process data outside your country, including in the United States. Where data from the European Economic Area, the United Kingdom or Switzerland is transferred, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.
6How long we keep it
- Account data: while your account is open. When you delete your account we remove or anonymise your name, email, country, interests, wallet and security fingerprints right away.
- Sessions: up to 30 days, and deleted when you log out or delete your account.
- Published reviews: kept and anonymised after account deletion (shown as a former member), because they are part of a company's public review record.
- Screenshots and unpublished review material: up to 24 months after the test, then deleted, unless needed for an open fraud investigation or legal claim.
- Ledger, withdrawal and payout records: kept for as long as accounting and tax law requires (typically up to 10 years), linked to an anonymised account.
- Fraud prevention records (IP addresses, fingerprints, audit log): up to 24 months, longer only for confirmed fraud cases.
7Your rights
Depending on where you live (for example under the GDPR or UK GDPR), you have the right to:
- access the personal data we hold about you and get a copy in a portable format;
- correct inaccurate data;
- delete your data (you can delete your account yourself from your profile, see Delete account);
- restrict or object to processing based on our legitimate interests;
- withdraw consent where we rely on it, at any time;
- lodge a complaint with your local data protection authority.
Email [CONTACT EMAIL] to use these rights. We reply within one month and may need to confirm your identity first. Some data must be kept for legal reasons even after a deletion request, as explained above.
9Security
Passwords are hashed with Argon2. Test logins uploaded by companies are encrypted at rest (AES-256-GCM) and shown only to the assigned tester. Screenshots are stored privately and are visible only to the Hive Team. All traffic uses HTTPS. No system is perfectly secure, so please use a strong, unique password.
10Children
VouchHive is only for people aged 18 or over. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.
11Changes to this policy
We will update the date at the top of this page when we change this policy, and tell you in advance by email or in the app if the change is significant.