Privacy Policy

Who we are

StoryVouch is run by Kevel Idea, Inc., 2727 Stingle Avenue, #8, Rosemead, CA 91770. This policy explains what we collect, why, and your choices. Questions: kevin@kevelidea.com.

On behalf of the school you are dealing with

When you use a client school's StoryVouch page (to become a referrer, or to ask for information after a friend shares a link), StoryVouch acts on behalf of that school. The school is the one that decides how your information is used, and its own privacy policy also applies. We process the information to run its referral program and to send it to that school's CRM.

The pages under /demo are labelled concept demos. They store no personal data.

What we collect and why

We collect only what we need to run the service:

• Names, email addresses and phone numbers: to identify referrers and leads, and so the school can follow up.
• Uploaded videos and the story you record: to show your story to the friends you share your link with.
• Referral codes: to link each lead to the referrer who shared the link, so the school knows who to thank or reward.
• Any extra answers the school asks for on its form: to qualify the lead.
• School sign-up details (name, work email, school name, CRM) when you ask for a demo: to contact you about the demo.
• Admin sign-in phone numbers: to text a sign-in code to school admins.
• Basic technical data such as logs of errors and delivery status: to keep the service working and fix problems.

How we use it

To provide the service you asked for, send leads to the school's CRM, sign admins in, prevent abuse, and fix problems. We do not sell your personal information and we do not use it for advertising.

Where your information goes

Leads (names, emails, phones, referral codes and any extra answers) are sent to the CRM the client school chose, such as HubSpot, Salesforce, Twenty or a webhook the school controls. After that, the school's own systems and policies apply.

These service providers process data for us, only to run the service, under their own privacy and security commitments:

• Vercel (vercel.com): hosting for the site and its servers, and Vercel Blob storage for videos, referral records and lead logs.
• Twilio (twilio.com): sends the sign-in code by text to school admins.
• The client's chosen CRM (HubSpot, Salesforce, Twenty or webhook): receives the leads for that school.
• Google Fonts (fonts.google.com): the font files for our pages load from Google, which can see visitors' IP addresses when they do.
• The Request-a-change widget (request-for-change.vercel.app): lets the operator receive change requests; requests go to the operator's Linear issue tracker.
• App Kit (app-kit-three.vercel.app): the guided-tour script and failure monitoring, which receives failure reports with masked customer identifiers.

Cookies

We use a sign-in cookie for the admin area and the small amount of browser storage needed for features like remembering your progress while you record a story, or a finished tour. We do not use advertising or cross-site tracking cookies of our own. A client's CRM tracking cookie (for example HubSpot's) may be read to connect a lead to its web visit.

How long we keep it

• Lead and referrer records, and videos: you can ask us to delete yours at any time by emailing kevin@kevelidea.com.
• Demo requests: kept as long as needed to respond to you.
• Error records used for monitoring: deleted after about 7 days.

Your choices and rights

You can ask for a copy of your information, to correct it, or to delete it (including your video) by emailing kevin@kevelidea.com. We will reply within 30 days. Because the school you referred or contacted decides how your information is used, we may pass your request to it.

If you live in California or another place with privacy laws, you have these rights too, and we will not treat you differently for using them. We do not sell or share personal information as those laws define it.

Security

Data is encrypted in transit and stored with our hosting provider. Videos are meant to be seen: anyone with a referral link can watch that person's video. Other records (contact details, leads) are kept in a Vercel Blob store under long, random web addresses that we never publish; anyone who had one of those addresses could open the file. No system is perfectly secure; if a breach affects you, we will tell you.

Children

StoryVouch is not for children under 13, and we do not knowingly collect their data. If you think a child gave us data, email us and we will delete it.

Changes

If we change this policy, we will update the date at the top, and tell you first if the change matters.