Privacy Policy

Vibenest operates Vouchbit. For privacy questions or requests, email Vibenest at vibenestcustomerservice@gmail.com.

This policy explains what happens to your information when you create an account, send work for review, respond to a request, or open an approval record. It also explains who can see a review and how to reach us about your information.

If someone sends you a review link, you can open it without an account. Anyone who gets that link can open the same review, see the work and comments available there, and use the review actions that are still open. If you forward the link, the person you send it to gets that access too.

Once a decision is recorded, anyone with the record link can view the decision and download the PDF without signing in. The record can identify the reviewer and show information about the work and the decision. A recipient can keep or forward a downloaded PDF. Share these links only with people you intend to give access to.

A name or email address on a record does not prove who used the link or that the person had authority to act for someone else.

The person requesting a review may give us your name and email address before you interact with Vouchbit. When you reply, comment or record a decision, we receive the details you submit and associate them with that revision. A team owner can also give us your email address to send you an invitation.

Depending on how you use Vouchbit, we handle the following information.

  • Account and sign-in: your account name and email address. We use your email address and password to sign you in. Session records can include your IP address and information about your browser.
  • Requests and submitted work: request titles and descriptions, project names when provided, reviewer names and email addresses, and the submitted file or URL. File and saved-revision details can include a filename or label, file type, file size, submission version and time, and a SHA-256 file hash when available.
  • Comments and annotations: comment and reply text, commenter name and any email address provided, whether feedback is general or attached to a pin or marked area, page and position details, and whether a comment was resolved or reopened and when.
  • Decisions and records: the Approve or Request changes decision, any decision comment, the reviewer name and email, decision time, revision and available file hash, plus available user-agent, device-platform and accepted-language details. These details are included in the public decision record and its PDF when available.
  • Teams and invitations: team name, owner or member role, invited email address, invitation status, and invitation and acceptance dates.
  • Email delivery: recipient email addresses and delivery status or attempt times for review and comment notifications and decision confirmations.

Vouchbit uses this information to sign you in, provide reviews and discussions, record decisions, create requested records, send service emails, and apply account plan limits.

Vouchbit may use your email address for account verification and password-reset messages, review requests, comment and reply notices, decision confirmations, and team invitations. Vouchbit does not send scheduled reminder emails for unanswered approval requests. These service messages are separate from the optional marketing choice shown when an account is created. Vouchbit records that choice.

When you create an account, you can choose whether to receive optional Vouchbit updates and freelancer opportunities. You can change or withdraw that choice in your account under Marketing preferences. That choice is separate from service emails about your account, reviews, comments, decisions and team invitations.

For an ordinary web link, Vouchbit records the submitted URL; the page content is not saved as part of that decision and may change later. When a direct image or PDF link is prepared for visual annotation, Vouchbit retrieves and saves a fixed revision. Uploaded files and saved revisions are associated with the submitted version and available file details, including a hash when one is produced.

A signed-in account owner can create a team and invite someone by email. The invitee must sign in or create an account and accept the invitation. The available roles are owner and member. Team membership does not share approval requests created by another account with other team members.

When you purchase Pro, you enter your payment information on Stripe’s checkout page. Vouchbit uses checkout and subscription information to apply your plan and its limits. For information about how Stripe handles personal data, see Stripe’s Privacy Policy.

When you sign in, Vouchbit uses an account session cookie. The current authentication setup uses an HttpOnly, SameSite=Lax cookie with a seven-day cookie max age and Secure on HTTPS. Clearing or blocking that cookie can prevent sign-in or end the browser session.

When review comments are loaded or changed, Vouchbit may set a vouchbit_review_identity cookie for that review’s token-specific API path. It is HttpOnly, SameSite=Lax, Secure on HTTPS, and has a one-year Max-Age. It lets the review recognize an anonymous commenter for comment ownership. Clearing or blocking it can make Vouchbit treat later activity as a different reviewer and may prevent editing comments tied to the previous identity.

The review page also saves the reviewer name in browser local storage under a key for that review. The app does not set an expiry for that value; clearing browser storage removes it, and blocking local storage means the name will not be remembered for later visits.

The site checks browser local storage for a saved theme preference. If none is saved, it follows your device appearance setting. Clearing browser storage removes a saved preference.

If analytics is enabled for a deployment, Vouchbit saves a random visitor identifier in browser local storage under the key polsia_vid and sends a page-load beacon to Polsia with the deployment identifier and visitor identifier. The analytics component is mounted at the app root, so it runs on signed-in pages, public pages and reviewer links. Vouchbit does not set an expiry for the visitor identifier. If browser storage is blocked, the beacon is skipped.

Stripe Checkout is a separate page hosted by Stripe. Stripe’s own browser storage and privacy practices are separate from Vouchbit’s; see Stripe’s Privacy Policy.

Whether you have a Vouchbit account or reviewed someone else’s work, you can email Vibenest at vibenestcustomerservice@gmail.com to ask what personal information we hold about you, how we use it, and to whom it has been disclosed. You can ask us to correct inaccurate information, request deletion, or raise a privacy concern. If you want to withdraw consent, tell us what use you want to stop. We’ll explain any limits and how your choice affects the service.

In your message, identify the email address used for the account or review and briefly describe your request. Please leave out passwords, payment details and review links. We may need to verify your identity before discussing or changing a record. If we cannot fulfil all of your request, we’ll explain why. If you have raised a concern with us and it remains unresolved, you can contact the Office of the Privacy Commissioner of Canada where its mandate applies.