What TrueVouch keeps, and why

Who we are

TrueVouch, LLC, a Washington limited liability company in Redmond, Washington, United States. Questions about this policy go to josh@truevouch.com, and we answer with a mailing address on request.

What we collect

Your account. Your email address and a session cookie, which is what signing in needs. If you sign in with Google or Apple, we receive the account identifier, the email address, and the display name on that account, and we use them only to sign you in and to show you which accounts are connected. We never post to those accounts or read anything else from them.

Sign-in signals. When you sign in, our fraud-prevention provider, Verisoul, reads signals from your device and network (the kind of device and browser, its settings, your IP address and its location, whether it looks like a VPN, proxy or datacenter) and how you interact with the sign-in page (mouse, touch and typing patterns, not what you type). They also give the device itself an identifier that stays the same the next time you sign in from it. We receive a risk decision and those signals and keep them with your account for our staff to review; we use them to tell us when an account signs in from the same device, network or email address as another TrueVouch account, which our staff look at and nothing else acts on. They are never shown on your profile and never used in your score. Deleting your account deletes them here and asks Verisoul to delete theirs.

Your profile. The handle, display name, location, bio, and avatar you choose. You write these; they are public.

Your trading record. The deals you propose or accept: what each side wrote about their side, the category, who confirmed what and when, and the outcome. The vouches you give and receive, with any note. The people you follow, the people you block, and the reports you file. Counts and outcomes appear on your public profile. The details of a deal never do: they are visible to the two people in it and to our staff when a report requires it, and they are never in search.

Identity verification. The check itself happens with our verification provider, on their page. TrueVouch keeps a salted fingerprint of the document, a reference to the check, and the result: never your name, date of birth, address, document number, or images. The provider holds those under its own policy.

Social accounts. You can link Discord, Facebook, or X to prove you are the same person people know there. You approve it on that platform’s own consent screen, and we receive your account identifier, your public name or handle, and your profile picture, nothing else: no posts, friends, followers, messages, or groups. The name or handle shows on your public profile, with a link to your X profile where one exists. Unlinking removes it from your profile and deletes what we stored from that platform.

Connected marketplaces. When you connect a marketplace account such as eBay, you start it and approve it on the marketplace’s own consent screen. We receive your account identifier, your public username, a link to your public profile there, and the public summary of your reputation (score, positive percentage, member-since year, period counts, and seller level where the marketplace offers one). We store that summary, and an encrypted refresh token so the summary can be brought up to date once every 30 days. We never receive your name, address, email, phone, items, orders, buyers, or individual feedback comments from a marketplace. The eBay connection is described in full on its own page.

Device and diagnostics. A push notification token from the app, only if you turn notifications on. Error reports with the request that failed, so we can fix it. Server logs with IP address, browser, and time, kept briefly for security. A device signal used only to spot abuse. No advertising trackers, no ad networks, and we never sell data.

The waitlist. Your email address and which page you joined from, deleted on request.

How we use it

• To run the service: sign you in, show your record, let two people confirm a deal.
• To compute your trust score, standing, and tier from your record and the summaries of your connected marketplaces. Categories are display only and never feed the score.
• To prevent abuse: patterns across deals and vouches, and the device signal. We never publish the specific signal that flagged an account.
• To send the messages you asked for: sign-in codes, deal and vouch notifications, and, if you joined the waitlist, your invite.

Who can see what

Public, on your profile page and in search by handle: your handle, display name, location and bio if you added them, your score, standing, and tier, your deal counts and how deals went, the categories you trade in, who vouched for you, and the tiles of your connected marketplaces.

Private: your email address, the details of your deals, your follows, your blocks, your reports, your notification settings, and everything identity verification touches.

Staff see private data only when a report or an abuse signal requires a look, and every staff action on a record is logged.

Who we share it with

Service providers who process data for us under their own terms: Supabase (database and sign-in), Vercel (hosting), Sentry (error reports), Resend (email), Expo (app notifications), our identity verification provider, Verisoul (fraud prevention at sign-in), and the marketplaces and sign-in providers you choose to connect. We share what each one needs to do its job and nothing more. We disclose data to a public authority only when the law requires it, under a written process: a founder and counsel review the request’s legal basis, we disclose the minimum that satisfies it, we tell you unless the law forbids it, and we log every request. We never sell data.

How long we keep it, and how to delete it

We keep your data while your account exists. To delete your account, open Settings, then Account, then Delete account, or email us and we will do it within 30 days. When an account is deleted:

• Your display name, location, bio, avatar, and device signal are erased at once, and your sign-in is removed.
• Your follows, blocks, and push notification tokens are deleted.
• Your connected marketplaces are disconnected and their tokens deleted.
• The identity fingerprint is released, so the same document can verify a later account. A document banned for confirmed abuse stays banned.
• The deals and vouches you were part of stay on the other person’s record as “a deal with a deleted account”, with no name attached, and your handle is retired and never reissued. A record that could be erased by deleting and rejoining would not be worth anything to anyone.

Sign-in signals. The device and network detail of a sign-in check is removed after 90 days; the decision and scores stay with the account while it exists, and deleting the account deletes them all.

Data from a connected platform. To delete what TrueVouch received from a marketplace or sign-in provider without deleting your account, disconnect it in Settings, then Connections; the token is deleted and the identity is removed from your record. When a platform tells us an account was closed, we remove every identifier we hold for it automatically.

Platform commitments

• Google. TrueVouch’s use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. We use it to sign you in and for nothing else.
• Discord. Used, if you choose, to show your Discord name on your profile. It no longer signs anyone in. We never read your servers or messages.
• Facebook. Used only to prove you control the account and to show your name on your profile. We request no permissions beyond the public profile and email, and we never post, read your feed, friends, or groups, or use the data for anything else. To remove it, unlink Facebook in Settings or delete your account; either deletes what we received.
• X. Used only to prove you control the account and to show your handle on your profile with a link to it. We never read posts, followers, or messages, and never post.
• eBay. eBay content is shown in its own tile on your profile, attributed to eBay and linking back to it, kept only while the connection exists, and never resold or combined into rankings across sellers. We honor eBay’s account deletion notifications. Full detail on the eBay page.
• Any marketplace or sign-in provider we add later joins this section with the same rules before it goes live.

Security

Data is encrypted in transit. Tokens and secrets are encrypted at rest. The database is reachable only through our own server, not from browsers or apps. Session cookies cannot be read by page scripts. Staff access is limited and logged.

Age

TrueVouch is for adults. Verifying a government ID is part of joining, and we do not knowingly keep an account for anyone under 18.

Your choices

You can edit your profile, disconnect any connected account, turn notifications off, block anyone, and delete your account, all from Settings. You can ask us for a copy of your data or for corrections at the address above.