Privacy policy

Vouched operates this platform and decides how your personal data is handled. Under the Data Privacy Act of 2012 (RA 10173) that makes us the personal information controller.

If you want anything on this page explained or acted on, contact us and a person will answer. We do not route privacy requests to a bot.

Account details: your name, email and password. Without these there is no account.

Identity documents: a government ID and, for creators, a payout account whose name matches it. This exists because brands are handing money to strangers, and because we cannot send a payout to a name we never checked.

Public social data: your handles, follower counts, view counts and audience geography, read from your public profiles. We measure these ourselves rather than asking you to type them, which is what makes a campaign requirement checkable.

Work and payment records: submissions, approvals, earnings and payouts. These are financial records and are kept even after an account closes.

Business details, for brands: registration numbers, TIN, contact person, and any certificates you upload. This exists so creators can trust that a funded campaign is a real business.

Technical data: IP address and device information in server logs, used for security and abuse prevention.

Government IDs are sensitive personal information under RA 10173, which means we need your consent and a higher standard of care. We collect them only for identity and payout verification, never for marketing, and we never sell them.

Brands you work with see your creator profile, your verified metrics and the work you submit to them. They do not see your ID, your payout details or your address.

Your team lead, if you join a team, sees the work you do and what your payouts were, because that is what their commission is calculated from. They do not see your ID or payout details.

Our processors: Supabase for the database and file storage, Vercel for hosting, and payment providers to actually move money. Each is bound to process data only on our instructions.

Government agencies where the law requires it, such as a lawful order or a BIR or AMLA obligation.

We do not sell personal data. There is no version of this business where that becomes acceptable.

Our database is hosted in Singapore and some processors operate outside the Philippines, so your data crosses borders. RA 10173 allows this and holds us responsible for it regardless of where it sits, which is the standard we work to.

Account and profile data: while your account is open, then one year.

Financial records including payouts and receipts: ten years, because tax and anti-money-laundering rules require it. This is why closing an account does not erase what you were paid.

Identity documents: while the account is open, then five years, then deleted.

Server logs: twelve months.

You can ask what we hold about you and get a copy in a portable form. You can correct anything wrong. You can object to processing, and you can ask us to delete data we no longer have a lawful reason to keep.

You can withdraw consent at any time. Where we still have a legal duty to keep something, such as a payout record, we tell you which duty rather than refusing without explanation.

You can complain to the National Privacy Commission. We would rather you told us first so we can fix it, but that route is yours regardless.

We answer requests within fifteen working days.

Access to your rows is enforced in the database itself, not only in the app, so a bug in a page cannot expose another person's data. Payout details, identity documents and financial records are restricted further.

If a breach puts you at real risk, we notify you and the National Privacy Commission within 72 hours of knowing. We would tell you anyway.

We use cookies that are necessary to keep you signed in. These cannot be turned off without breaking sign-in.

If analytics are enabled, Google Analytics is used with IP anonymisation and acts as our processor. Analytics identifiers count as personal data under RA 10173, which is why it is named here rather than buried.

You must be at least 18 to earn money on Vouched. We do not knowingly collect data from minors, and we delete it if we find it.