1. About This Policy
VoucherKing NYC (“VoucherKing,” “we,” “us,” or “our”) operates the website voucherkingnyc.com. This Privacy Policy explains what information we collect when you use our site, how we use it, and your choices regarding that information.
2. Information We Collect
- Account information:Email address and password (hashed) when you create an account. If you sign in with Google, we receive your name, email address, and basic profile information from Google. See “Google User Data” below for the other Google features you can connect.
- Voucher profile: Voucher type, bedroom size, and preferred borough that you provide to personalize listing results. This is stored on our servers.
- Usage data: Pages visited, clicks, and browser/device type collected automatically via server logs and analytics. This data is aggregated and not linked to individual users.
- Communications: If you contact us by email, we retain that correspondence to respond to you.
3. How We Use Your Information
- To create and manage your account
- To match you with voucher-eligible listings based on your voucher profile
- To send transactional emails (password reset, account verification) via Resend
- To send email from your own Gmail address, create and sync calendar meetings, and read landlord spreadsheets, only after you connect those Google features
- To improve the platform and troubleshoot issues
- To comply with applicable law
We do not sell your personal information to third parties.
4. Third-Party Services
We use the following third-party services, each governed by their own privacy policy:
- Neon / PostgreSQL — account credential storage
- VK CRM — listing and contact management
- Mapbox — interactive maps on the listings page
- Resend — transactional email delivery
- Google (Sign-In, Gmail, Calendar, Sheets)— sign-in, sending email from your Gmail address, calendar meetings, and reading spreadsheets you connect, as described in “Google User Data”
- Anthropic— an AI service that helps interpret the layout of landlord vacancy spreadsheets, as described in “Google User Data”
- Vercel — website hosting and infrastructure
5. Cookies and Session Data
We use a single secure, HTTP-only session cookie to keep you signed in. We do not use advertising cookies or third-party tracking pixels. Mapbox may set cookies when you interact with the map.
6. Data Retention
Account data is retained for as long as your account is active. You may request deletion of your account and associated data by emailing us at help@voucherkingnyc.com. When you disconnect a Google feature in VoucherKing, we delete the Google tokens we stored for it.
7. Security
Passwords are hashed before storage and never stored in plain text. All data is transmitted over HTTPS. We use industry-standard practices to protect your information, but no system is completely secure.
8. Children
VoucherKing is not directed at children under 13. We do not knowingly collect information from children.
9. Zoom Integration
Signed-in users may connect their own Zoom account so VoucherKing can create Zoom meetings on their behalf. When you connect, we receive your Zoom display name and email address and an access token and refresh token for your account. We use them only to create meetings you schedule in VoucherKing and to show which Zoom account is connected. We also store the meeting ID and join link on the related event. We do not access your recordings, chats, contacts, or other Zoom content. Tokens are stored server-side only and are never sent to your browser. You can remove the app from your Zoom account at any time, and you may ask us to delete the stored Zoom data by emailing us.
10. Google User Data
VoucherKing lets signed-in users connect a Google account. We request only the access needed for the features below, and only when you choose to use them.
- Sign-In (name, email address, profile). We use these to identify you and sign you in to your VoucherKing account.
- Gmail (send only). If you connect Gmail, VoucherKing can send emails you compose or approve from your own Gmail address, such as messages to applicants and landlords. We do not read, search, list, or delete your emails, and we do not access your inbox, drafts, or contacts. Emails sent through VoucherKing may be recorded in the related VoucherKing record.
- Google Calendar (events). If you connect Google Calendar, VoucherKing can create, update, and delete events on your primary calendar for meetings you schedule in VoucherKing, including Google Meet links. It can also read your calendar events, and we store event details such as title, time, and attendees in VoucherKing so they appear with the related records. We only change or delete events that were created in VoucherKing.
- Google Sheets (read only). If you connect a Google account for spreadsheets, VoucherKing reads the spreadsheets you point it to, such as landlord vacancy sheets, and cannot edit them. To interpret how a sheet is laid out, a sample of its contents is sent to Anthropic, a third-party AI service, which returns the layout interpretation. We use the sheet data to keep listings up to date in VoucherKing.
Storage and protection.Google access tokens are stored on our servers and are not sent to your browser. Your Gmail refresh token is stored encrypted. Calendar events and sheet data we read are stored in our database and are available only to your signed-in account, your organization’s authorized users where the record is shared, and authorized personnel who operate the service.
Disconnecting and deletion.You can disconnect Gmail and Google Calendar from your VoucherKing settings, which deletes the Google tokens we stored for them. You can also revoke VoucherKing’s access at any time at myaccount.google.com/permissions. To have us delete the Google data we hold about you, including stored calendar event details and spreadsheet connections, email help@voucherkingnyc.com from the address on your account.
Limited Use.VoucherKing’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- We use Google user data only to provide the user-facing features described above.
- We do not transfer Google user data to others, except as necessary to provide those features (for example, to the AI service described above for reading spreadsheet layouts), to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to you.
- We do not use Google user data for serving advertisements.
- We do not sell Google user data.
- We do not use Google user data to develop, improve, or train generalized AI or machine-learning models.
- We do not allow humans to read Google user data, unless you give us explicit permission for specific data, it is necessary for security purposes such as investigating abuse, it is necessary to comply with applicable law, or the data is aggregated and anonymized for internal operations.
11. Your Privacy Rights
Depending on where you live, you have the right to know what personal information we hold about you, to request a copy of it, to correct it, and to ask us to delete it. To exercise any of these data subject rights, email help@voucherkingnyc.com from the address on your account. We will respond within a reasonable time, and we will not treat you differently for exercising your rights.
12. Changes to This Policy
We may update this policy from time to time. Material changes will be noted with an updated “Last updated” date at the top of this page.
