Privacy Policy

1. Scope

This Privacy Policy applies to VaporDrive websites, account portals, object storage services, support channels, and related services (collectively, the “Services”). It applies to account owners, team members, website visitors, and people who contact us.

Customers control the files and objects they upload. VaporDrive processes that customer content only to provide, secure, maintain, and support the Services, or as required by law.

2. Information we collect

Information you provide

• Account details, including your name, email address, organization, and authentication information.
• Billing and subscription details. Payment card information is processed by our payment service and is not stored in full by VaporDrive.
• Support messages, survey responses, and other communications you send to us.
• Customer content, bucket names, object metadata, access policies, and configuration data you submit through the Services.

Information collected automatically

• Device, browser, IP address, approximate location, and operating system information.
• Security and activity logs, including sign-ins, administrative actions, API requests, and storage operations.
• Usage information such as storage volume, object counts, feature interactions, performance, and error data.
• Cookie and similar technology data as described in our Cookie Policy.

3. How we use information

• Provide accounts, storage, billing, support, and requested functionality.
• Authenticate users, prevent fraud and abuse, investigate incidents, and protect the Services.
• Monitor reliability, calculate usage, troubleshoot errors, and improve performance.
• Send transactional notices about your account, subscription, service status, and security.
• Send marketing communications where permitted; you can unsubscribe at any time.
• Comply with law, enforce our agreements, and establish or defend legal claims.

4. Legal bases

Where applicable law requires a legal basis, we process information to perform our contract with you, comply with legal obligations, pursue legitimate interests such as securing and improving the Services, and based on consent where requested. You may withdraw consent at any time without affecting earlier lawful processing.

5. How we share information

We do not sell personal information. We may share limited information with service providers that help operate billing, communications, analytics, security, customer support, and infrastructure. These providers may use information only under our instructions and contractual safeguards.

We may also disclose information when required by law, to protect rights and safety, in connection with a corporate transaction, or at your direction. Customer content is not disclosed to other customers.

6. Retention

We retain account and service information while your account is active and afterward as needed for legal, security, billing, backup, and dispute-resolution purposes. Retention periods vary by data type. Customer content is handled according to your deletion instructions, account status, backup cycles, and applicable legal requirements.

7. Security

We use administrative, technical, and physical safeguards designed to protect information, including encryption in transit, encryption at rest where supported, access controls, monitoring, and credential protection. No system is completely secure, so you are responsible for protecting account credentials and promptly reporting suspected unauthorized access.

8. International data transfers

VaporDrive and its service providers may process information in countries other than your own. Where required, we use recognized transfer safeguards and take steps designed to protect information consistently with this policy.

9. Your privacy rights

Depending on your location, you may have rights to access, correct, delete, restrict, or obtain a copy of personal information; object to certain processing; withdraw consent; or appeal a decision. You may also lodge a complaint with your local data protection authority.

To make a request, email privacy@vapordrive.net. We may verify your identity and may retain information where permitted or required by law.

10. Children

The Services are intended for businesses and people old enough to enter a binding contract. They are not directed to children under 13, and we do not knowingly collect their personal information.

11. Changes to this policy

We may update this policy as the Services or applicable laws change. We will post the revised version with a new effective date and provide additional notice when a material change requires it.

12. Contact us

Questions or privacy requests can be sent to privacy@vapordrive.net.