Privacy Policy

1. Who We Are

Cloud Vapor Co. is an Egyptian e-liquid manufacturer and retailer operating at cloudvaporco.com. We are based in Cairo, Egypt. References to “we”, “us”, or “our” in this policy refer to Cloud Vapor Co.

2. Information We Collect

We collect information you provide directly when you:

• Create an account (name, email address, password)
• Sign in with Google (name, email address, profile picture)
• Place an order (delivery name, phone number, delivery address)
• Submit a product review (review text, star rating)
• Contact us via the contact form (name, email, message)

We also automatically collect basic usage data (pages visited, browser type, device type) through Vercel Analytics for the purpose of improving site performance. This data is anonymised and does not identify you personally.

3. How We Use Your Information

• To process and fulfil your orders and arrange delivery
• To send order confirmation and shipping notifications by email
• To manage your account and loyalty points balance
• To respond to enquiries you send through the contact form
• To detect and prevent fraudulent orders
• To improve our website and product offerings

We do not sell, rent, or trade your personal information to third parties.

4. Google User Data

Cloud Vapor Co.'s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Data accessed

When you choose to sign in with Google, we request only the following scopes from your Google account: your email address, your basic profile (name and profile picture), and your Google account identifier. We do not request access to Gmail, Drive, Calendar, Contacts, YouTube, or any other Google service.

Data usage

We use the data exclusively to: (a) create and authenticate your Cloud Vapor Co. customer account, (b) display your name and profile picture on your account page, (c) send order confirmations to your Google email address. We do not use Google user data for advertising, profiling, or any purpose unrelated to providing you with the Cloud Vapor Co. customer experience.

Data sharing

We do not share Google user data with third parties, except with the limited infrastructure providers required to operate the service: Supabase (database and authentication, EU region) and Resend (transactional email delivery). These providers process the data on our behalf under contractual data-processing agreements. We never sell, rent, or trade Google user data.

Data storage and protection

Google user data is stored encrypted at rest in Supabase's EU region. Access is restricted to authenticated database connections using row-level security, and only the account owner and authorised Cloud Vapor Co. administrators can view this data. Transport is encrypted via HTTPS/TLS at all times.

Data retention and deletion

Google user data is retained for as long as your Cloud Vapor Co. account remains active. You can request deletion of your account and all associated Google user data at any time by emailing info@cloudvaporco.com with the subject line “Delete my account”. We will permanently delete your account and Google user data within 30 days of receiving the request, except where retention is required by law (e.g. tax records).

5. Third-Party Services

We use the following third-party services to operate our platform:

• Supabase — database and authentication (data stored in EU region)
• Resend — transactional email delivery
• Google OAuth — optional social sign-in
• Vercel — website hosting and analytics

Each provider operates under their own privacy policy and applicable data protection regulations.

6. Data Retention

We retain your account and order data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where we are required to retain it by law (e.g. transaction records).

7. Cookies

We use session cookies strictly necessary for authentication and maintaining your cart. We do not use advertising or tracking cookies. You can disable cookies in your browser settings, but this will prevent you from signing in or completing a purchase.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Withdraw consent to marketing communications at any time

To exercise any of these rights, contact us at info@cloudvaporco.com.

9. Contact

Questions about this policy? Email us at info@cloudvaporco.com or use our contact form.