Legal
Terms of Use
Last updated: May 20, 2026
Vouch provides software that other businesses use to run their own customer review and feedback programs. These terms govern access to the Platform. They are written to be clear about what we provide, what you agree to, and the boundaries on how the Platform may be used.
The short version
- Vouch is a software platform. The businesses that use it run their own promotions and ask their own customers for reviews. Vouch does not run promotions of its own using customer data.
- You are responsible for the data you upload, the messages you send, and the consents you collect from your customers.
- We do not own, sell, or remarket your data. We process it only to deliver the service you configured.
- You retain all rights to your data and your content.
- Don't use the Platform to send unlawful, deceptive, or harassing messages, or to fabricate reviews.
1. Agreement to terms
These Terms of Use (the “Terms”) form an agreement between you and Vouch (“Vouch”, “we”, “us”) and govern your access to and use of the Vouch platform at tryvouch.io, app.tryvouch.io, our APIs, and any related services we provide (collectively, the “Platform”). By creating an account, signing into a workspace, calling our API, or otherwise using the Platform, you agree to these Terms. If you are accepting them on behalf of an organization, you confirm that you have authority to bind that organization.
If a separate signed order form or master service agreement exists between your organization and Vouch, that agreement controls in case of conflict.
2. What Vouch provides
Vouch is a multi-tenant SaaS platform that lets businesses run their own customer review solicitation, response management, feedback collection, and reputation analytics. Vouch supplies the tooling — campaign engines, inboxes, AI assistance, workflows, integrations with platforms like Google, Yelp, Facebook, Tripadvisor, and Trustpilot, analytics, and reporting. The promotions, campaigns, and customer outreach themselves are designed, scheduled, and sent by the business using the Platform, on its own customer list, for its own purposes.
Vouch does not operate promotions on its own behalf using business or consumer data from the Platform. Customer data uploaded or generated in a workspace is used solely to deliver the service to that workspace.
3. Accounts and security
You must provide accurate registration information and keep it current. You are responsible for activity that occurs under your account, for the actions of users you invite to your workspace, and for safeguarding credentials, API keys, and SSO configurations. Notify support@aartha.ai immediately if you suspect unauthorized access.
We may require multi-factor authentication, suspend access after suspicious activity, or rotate credentials when reasonably necessary to protect the Platform.
4. Your data, your customers
All data you upload, generate, or import into your workspace — including customer records, campaign content, replies, feedback, analytics, and any AI-generated drafts based on your content (collectively, “Customer Data”) — remains yours. You retain all right, title, and interest in Customer Data, including all intellectual property rights.
You grant Vouch a limited, worldwide, non-exclusive, royalty-free license to host, copy, transmit, display, and process Customer Data solely to provide and support the Platform for you. We do not use Customer Data to market our own products to your customers, to power features in other workspaces, to train public AI models, or to enrich any other dataset.
Our handling of personal data within Customer Data is governed by our Privacy Policy and, where applicable, the Data Processing Agreement we enter into with your organization.
5. Acceptable use
Your use of the Platform is governed by our Acceptable Use Policy (the “AUP”), which is incorporated into these Terms by reference. The AUP sets out the rules for messaging compliance (TCPA, CAN-SPAM, GDPR/ePrivacy, CASL, 10DLC, WhatsApp Business policy, etc.), the prohibitions on fake or fabricated reviews and review-gating under the FTC’s Rule on the Use of Consumer Reviews and Testimonials (16 CFR Part 465), and the rules that protect Platform integrity and other customers.
At a minimum, you agree not to:
- Send messages to recipients who have not provided the consent required under applicable law (e.g. TCPA, CAN-SPAM, GDPR/ePrivacy, CASL, PIPEDA, applicable SMS/WhatsApp policies).
- Upload purchased, scraped, or otherwise unlawfully obtained contact lists.
- Send unsolicited promotional messages, spam, deceptive content, phishing attempts, or messages that impersonate others.
- Solicit, generate, incentivize, gate, suppress, alter, or post fake or fraudulent reviews, in violation of the FTC fake-review rule (16 CFR Part 465), the FTC Endorsement Guides, or the policies of any connected review platform.
- Use the Platform to harass, threaten, defame, or discriminate against any person or group.
- Reverse engineer, decompile, or attempt to extract source code, model weights, or training data, except to the extent permitted by law.
- Probe, scan, or test the vulnerability of the Platform without our prior written authorization under the responsible-disclosure program described at /security/, or circumvent any security, tenant-isolation, or rate-limiting control.
- Use the Platform to build a competing product, or to train a third-party AI model on Platform features or output.
- Resell or sublicense the Platform without our written consent.
- Use the Platform in violation of any applicable law, regulation, or third-party platform terms (including those of Google, Yelp, Facebook, Tripadvisor, Trustpilot, and SMS/WhatsApp carriers).
6. Customer consent and messaging compliance
When you use the Platform to contact your customers, you represent and warrant that you have a lawful basis to do so, that you have collected and recorded the consents required by applicable law for each channel (email, SMS, WhatsApp, voice), that you honor opt-outs promptly, and that your messages identify you and include any required disclosures and unsubscribe mechanisms. Vouch provides tooling to help you do this, but you are the sender of record and remain responsible.
7. Third-party services
The Platform integrates with third-party services, including review platforms (Google, Yelp, Facebook, Tripadvisor, Trustpilot), messaging carriers, identity providers, and CRMs. Your use of those services is governed by the third party’s own terms. Connecting them authorizes Vouch to act on your behalf with the scopes you approve. We are not responsible for outages, content moderation decisions, or policy changes at those third parties.
8. AI features
The Platform offers AI-powered features, such as reply drafting, sentiment analysis, recommendation engines, Vouch Score, and content assistance. These features may produce output that is incomplete, inaccurate, or inappropriate for your context. You are responsible for reviewing and editing AI output before sending it to customers or publishing it to a review platform. AI features process Customer Data only within your workspace and only to generate output for you; Customer Data is not used to train models that serve other workspaces or external users. Full detail is in our AI Policy.
9. Developer APIs, OAuth 2.1, and the MCP server
Vouch exposes HTTP APIs, a webhook system, an OAuth 2.1 authorisation server, and a Model Context Protocol (MCP) server that lets you connect approved third-party applications and LLM clients to your workspace. When you authorise an application via OAuth — including any MCP client — you are granting it the scopes you approve, on your workspace, on your behalf. You are responsible for the applications you authorise, for the security of the access tokens issued to them, and for revoking them when no longer needed.
All API and MCP traffic is rate-limited, scoped to the calling workspace, and recorded in your audit log. Outbound webhook deliveries are HMAC-SHA256 signed under your shared secret. We may suspend an API key, OAuth client, or MCP token that is being used to abuse the Platform, violate our Acceptable Use Policy, or compromise the security of other customers.
10. Sub-processors, security, and incident notification
We use a small set of vetted sub-processors to deliver the Platform, listed at tryvouch.io/subprocessors/. When you process personal data through the Platform that triggers GDPR, UK GDPR, the CCPA service-provider regime, or an equivalent law, we will execute our standard Data Processing Agreement on request — contact support@aartha.ai. We provide customers under a DPA with at least 30 days’ advance notice of new sub-processors and an opportunity to object.
Security incident notification. In the event of a confirmed personal data breach affecting your workspace, we will notify your designated security contact without undue delay and in any event within 72 hours of confirmation, including what we know about scope, affected data categories, technical specifics, and remediation in progress. Where we act as a processor, we will support you in meeting your own regulatory notification obligations.
11. Fees, taxes, and renewals
Paid plans are billed according to the order form, pricing page, or subscription you accepted. Fees are exclusive of applicable taxes, which are your responsibility except for taxes on Vouch’s net income. Subscriptions renew automatically for the same term unless cancelled before the renewal date. Late payments may accrue interest at the lesser of 1.5% per month or the maximum permitted by law.
12. Suspension and termination
We may suspend or terminate your access if you materially breach these Terms, create risk or legal exposure for Vouch or other customers, fail to pay when due, or use the Platform in a way that disrupts service for others. Where reasonable, we will notify you and provide an opportunity to cure. You may terminate at any time by cancelling your subscription. On termination, we will make a final export of Customer Data available for at least 30 days in machine-readable formats (CSV and JSON for tabular data; the connected review platforms’ native formats for review content), after which we delete production records on a defined schedule and encrypted backups expire on their normal rotation thereafter.
13. Vouch's intellectual property
The Platform, the Vouch name, logo, documentation, and all related software, models, designs, and content (excluding Customer Data) are owned by Vouch and its licensors. Nothing in these Terms transfers any rights to you beyond the limited right to access and use the Platform during your subscription. Feedback you give us about the Platform may be used by us without obligation.
14. Confidentiality
Each party may receive confidential information from the other. The receiving party will use the same degree of care it uses to protect its own confidential information (and at least a reasonable degree of care), use it only to perform under these Terms, and disclose it only to personnel and contractors bound by equivalent obligations. These obligations do not apply to information that is independently developed, lawfully received from a third party without restriction, or required to be disclosed by law.
15. Warranties and disclaimers
We will provide the Platform with reasonable skill and care and in line with the security commitments described in our Privacy Policy. Except for those express commitments and to the maximum extent permitted by law, the Platform is provided “as is” and “as available”, and we disclaim all other warranties, whether express, implied, or statutory, including merchantability, fitness for a particular purpose, and non-infringement.
16. Indemnification
You will defend and indemnify Vouch against third-party claims arising from your Customer Data, your messages to recipients, your violation of these Terms, or your violation of applicable law. Vouch will defend and indemnify you against third-party claims that the Platform, as provided by us and used in accordance with these Terms, infringes that party’s intellectual property rights, subject to standard exclusions and our right to modify or replace the affected functionality.
17. Limitation of liability
To the maximum extent permitted by law, neither party will be liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenue, goodwill, or data. Each party’s aggregate liability arising out of or relating to these Terms will not exceed the fees paid by you to Vouch in the twelve months preceding the event giving rise to the claim. These limits do not apply to your indemnification obligations, your breach of acceptable use, or amounts owed.
18. Changes to the Platform and Terms
We may evolve the Platform over time. We will not materially degrade core features you are paying for during a subscription term. We may update these Terms; if we make a material change, we will notify you (typically by email or in-app notice) at least 30 days before the change takes effect for paid customers. Continued use after the effective date constitutes acceptance.
19. Governing law and disputes
These Terms are governed by the laws of the State of Delaware, United States, without regard to its conflict-of-laws principles. Subject to a good-faith effort to resolve disputes informally for 30 days, any dispute will be brought in the state or federal courts located in Delaware, and the parties consent to the exclusive jurisdiction of those courts. Nothing in this section prevents either party from seeking injunctive relief in any court of competent jurisdiction to protect its intellectual property or confidential information.
20. Export controls and sanctions
The Platform and any technology provided through it are subject to US export control laws and the trade sanctions regimes administered by OFAC, the US Department of Commerce, the EU, and the UK. You represent that you and your end users are not located in, organised under the laws of, or ordinarily resident in any country or region subject to comprehensive US sanctions, and that you are not identified on any restricted-party list (including the SDN List, the Entity List, or the EU Consolidated List). You will not export, re-export, or make the Platform available in any manner that violates these laws.
21. Miscellaneous
These Terms, together with the Privacy Policy and any signed order form or DPA, are the entire agreement between you and Vouch regarding the Platform. If any provision is held unenforceable, the rest remains in effect. You may not assign these Terms without our consent, except to an affiliate or in connection with a merger or sale of substantially all assets; we may assign freely. Notices to Vouch should be sent to support@aartha.ai. We may give notice through the Platform or to the contact email on file.
22. Contact
Legal: support@aartha.ai
Privacy: support@aartha.ai
Security: support@aartha.ai
General: support@aartha.ai