Privacy policy
Last updated 2 November 2026.
Vouchnote is a Wix app that asks a business's clients for a testimonial after their appointment and shows the testimonials the business approves on its website. Solimark LLC makes Vouchnote. This page says what we store, why we store it, how long we keep it and what happens when a business removes the app. If anything here is unclear, email hello@vouchnote.com.
Our role
For the clients of a business that uses Vouchnote, the business decides whom to ask and which testimonials to show. We process client data on the business's behalf and only to run the service for that business. For the business owner's own details, and for the two records described under "What we keep after deletion", we decide how the data is used.
What we store about a business
When a business installs Vouchnote, Wix gives us the site's ID and address, the business name and logo, the site's time zone, the owner's email address and the plan the business pays for. The owner then gives us a postal address for the request emails, a Google review link, the business's industry and the wording and styling of the request email. We read the business's public website to find testimonials it already shows and the review apps it uses.
We use the owner's email address to send notices about the app, such as a new testimonial waiting for approval. We do not send an owner marketing email after they remove the app.
What we store about a business's clients
When a client books through Wix Bookings, Wix tells us the booking. We store the client's name and email address, the service and the time the appointment ends. We use them to send one testimonial request on behalf of the business after the appointment. On the Pro plan we send one reminder three days later if the client has not answered. We do not use a client's email address for anything else, and we never add it to a mailing list.
When a member buys a plan through Wix Pricing Plans, Wix tells us the order: the plan, the date it started and a Wix contact ID, but no name or email address. When the request is due, which is a set number of days later, we check that the plan is still active and read the member's first name and email address from the business's Wix contacts. From then on we store and delete them in the same way as a booking client's. We send one request for each plan a member buys, not one for each visit.
If a business turns on requests for Wix Events, Wix tells us when one of its events ends. We then read the event's title and guest list from Wix: each guest's first name, email address, whether they hold a ticket or answered an RSVP, and whether their ticket was free. We ask each person once per event, even if they bought several tickets, and we do not ask guests Wix lists as not attending. RSVP guests and guests with free tickets are asked only if the business turns that on. Until the request is due we store the guest's Wix ID and the event, but not the name or email address. When it is due, we read the guest list again and store the name and email address in the same way as a booking client's.
We delete the client's name and email address 30 days after the request is sent, skipped or cancelled. We keep a keyed hash of the email address for 90 days so that the same business does not ask the same person twice in that time. A keyed hash cannot be turned back into the address without a secret that only our servers hold.
If a client writes a testimonial, we store the words, the name they give, their email address, the service, plan or event, and the month of the booking, the plan purchase or the event. The email address is kept so that we can send the client a link to edit or withdraw what they wrote. A testimonial is kept until the client withdraws it or the business removes the app. A business can hide a testimonial from its site, but hiding it does not delete it.
What we store about website visitors
The testimonial widget on a business's site loads from our servers, so our servers see the visitor's IP address. We use it only to limit how many requests one address can make, and we do not store it. To match the widget to the site's colours and fonts, the widget may send us those colours and fonts with a token from Wix. From the token we keep only a keyed hash of the anonymous visitor ID that Wix assigns. The widget sends no name, email address or browsing history.
This website, vouchnote.com, uses Google Analytics to count visits and clicks on links to the Wix App Market. It honours Global Privacy Control: a browser that sends that signal does not load Google Analytics.
How long we keep each item
| Data | How long we keep it |
|---|---|
| Client name and email address on a request | 30 days after the request is sent, skipped or cancelled |
| Keyed hash of a client's email address, for the 90-day pause between requests | 90 days after the request, or until the purge if the client wrote a testimonial |
| Testimonial and its author's name and email address | Until the author withdraws it, or the purge after uninstall |
| Business details, settings, site snapshot and theme | Until the purge after uninstall |
| Server logs | 30 days |
| Database backups | 7 days |
| Unsubscribe record (keyed hash) | No deletion date, so that the unsubscribe survives a reinstall |
| Consent record (no words and no email address) | 5 years after the testimonial is withdrawn, or after the purge |
When a business removes the app
Seven days after a business uninstalls Vouchnote, we delete its testimonial requests, its testimonials (including any it imported), the client names and email addresses on them, its settings, its site snapshot and its theme. If the business reinstalls within those seven days, nothing is deleted and the app carries on where it stopped. After the purge we keep a short record that the site used the app: the site's Wix ID, plan, industry and time zone, the install and removal dates, and our own notes on its sending. It holds no names and no email addresses. Copies of a deleted item can remain in database backups for up to 7 more days.
Testimonials the business copied onto its own pages by hand stay there. They are under the business's control, not ours.
What we keep after deletion
We keep two small records after the purge, for our own legal and sending duties. The first is the unsubscribe record: when a client unsubscribes from a business's requests, we keep a keyed hash of their email address so that the business never asks them again, even after a reinstall. The second is the consent record for each testimonial: the version of the consent wording the author agreed to, when they agreed, and when they withdrew, if they did. It holds no words and no email address. We keep it so that we can show the author agreed if the use of a testimonial is ever questioned.
Who else handles the data
Amazon Web Services hosts our servers and database in the United States and sends the request emails. Wix is where the booking, plan and event data comes from, and Wix bills for the paid plan. Google Analytics counts visits to vouchnote.com and receives no client data. We do not sell or rent any data, and we do not share it with advertisers.
If we add a vendor that handles client data, we tell businesses by email 30 days before it starts. A business that objects can remove the app.
Businesses we have not met yet
Our crawler, VouchnoteBot, reads public business websites so that we can email businesses that might want Vouchnote. From those pages we keep the business name, its public contact email address and what its site says about its services. If you email hello@vouchnote.com, we delete that record and keep only a hash of your domain and address so that we do not contact you again.
Your choices
A client can unsubscribe from a business's requests with the link in every request email, and can edit or withdraw a testimonial with the link we send after they submit it. A client who wants a copy of their data, or wants it deleted, can ask the business or email us. We answer within 30 days. A business can hide any testimonial from its dashboard at any time, and removing the app starts the seven-day purge.
Security
Data travels over HTTPS and is stored in an encrypted database that only our servers can reach. Staff access is limited to the founder, who signs in with Google, and the admin tools can read only the columns they need.
Changes
If we change this policy in a way that affects data we already hold, we email the owners of installed sites before the change applies. The date at the top of this page shows the last change.
Contact
Solimark LLC, hello@vouchnote.com, Solimark LLC, 5441 S Macadam Ave Ste N, Portland, OR 97239.