vochay is a service of FLOCKFACTOR LLC (doing business as "vochay"). We help local businesses collect Google reviews and private feedback from their own customers. We take the privacy of business owners and their customers seriously, and we collect only what we need to run the service.
This Privacy Policy explains what information vochay collects, how we use it, who we share it with, and the choices you have. It applies to our website, our app, and the text messages we send on behalf of the businesses that use vochay.
Two relationships matter throughout this policy. A business client is the company that subscribes to vochay (for example, an HVAC or plumbing company). An end customer is that business's own customer, whose name and phone number the business adds to vochay so we can send a review request on the business's behalf. For end-customer personal information, the business client is the controller of that data and vochay acts as its service provider/processor.
We collect three kinds of information:
We use this information solely to provide and operate the service: to send review-request text messages on a business client's behalf, route private feedback to the business, display stats, register and maintain each client's messaging campaign with carriers, process subscriptions, provide support, keep the service secure, and meet our legal obligations.
We do not sell business client data or end-customer data, and we do not "share" it for cross-context behavioral advertising as those terms are defined under U.S. state privacy laws. We do not use it for advertising at all.
vochay sends text messages to the end customers a business client adds, inviting them to leave a public Google review or send private feedback. These messages are sent on the business client's behalf, from a phone number registered to that business.
The business client is responsible for obtaining consent. By using vochay, the business client represents that it has collected each recipient's consent to receive text messages at the point of service, and that it only enrolls customers acquired after it started using vochay — not historical or "past" contacts. Simply having been a customer, or having made a purchase, does not by itself constitute consent to be texted. The business client's obligations on consent are set out in our Terms of Service.
Message frequency varies by business and is typically low — an initial review request and at most a small number of reminders, after which messaging for that customer stops. Message and data rates may apply.
How to opt out: every message includes opt-out instructions. A recipient can reply STOP at any time to stop receiving messages, and HELP for help. When a recipient replies STOP, they are unsubscribed promptly from that business's messages and suppressed so that business cannot re-enroll them, and any revocation of consent is honored within ten (10) business days, consistent with the TCPA.
We rely on a small number of trusted providers to operate vochay:
| Provider | Purpose |
|---|---|
| Twilio | Text-message delivery and A2P 10DLC carrier registration |
| Supabase | Application database and authentication hosting |
| Stripe | Subscription billing and payment processing |
| Resend | Transactional and onboarding email delivery |
| Google (Places / Business Profile) | Retrieving public review information and review links |
| Vercel | Website and application hosting |
This list may change as the service evolves. We will keep this section current and require each sub-processor to handle data consistent with this policy.
Your data is stored on secured, industry-standard cloud infrastructure operated by the providers above, primarily in the United States. Connections are encrypted in transit, passwords are hashed, and sensitive fields are protected at rest. Access is limited to the systems and personnel required to operate vochay. No method of transmission or storage is perfectly secure, but we work to protect your information using reasonable safeguards.
We keep account and customer data for as long as a business client's account is active, so history and stats stay intact. If a client closes its account, we delete or anonymize personal data within a reasonable period, except where we are required to retain records for legal, tax, or accounting reasons, or to resolve disputes and enforce our agreements. Opt-out (STOP) records are retained as long as necessary to honor the opt-out.
Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to opt out of its sale or sharing. vochay does not sell or share personal information for cross-context behavioral advertising.
You can access, correct, export, or delete your account information at any time from your settings, or by contacting us.
If you received a text from a business using vochay and want your information accessed or removed, you can reply STOP to stop messages immediately, and you may contact us at privacy@vochay.com. Because the business that texted you controls your information, we may route your request to that business and will assist them in fulfilling it.
California residents, and residents of other states with comprehensive privacy laws, may exercise the rights described above and will not be discriminated against for doing so. The categories of personal information we handle, and our purposes for using them, are described in the sections above. To make a request, email privacy@vochay.com. We will verify your request before acting on it.
vochay is a tool for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child's information has been provided to us, contact us and we will delete it.
We may update this policy as the service evolves or as the law changes. When we make a material change, we will update the "Last updated" date above and, where appropriate, notify business clients. Continuing to use vochay after a change means you accept the updated policy.
Questions about this policy or your data? Email us at privacy@vochay.com, or write to FLOCKFACTOR LLC (DBA vochay), [BUSINESS MAILING ADDRESS — Ohio]. We'll get back to you.
This document is a starting template, not legal advice. It was prepared to meet mobile-carrier (A2P 10DLC) registration requirements and common U.S. privacy expectations, but it has not been reviewed by an attorney. Have a lawyer review it before you rely on it — especially the SMS, consent, and state-rights sections.