Privacy Policy

This Privacy Policy explains how Vacto collects, uses, shares, and protects information when sellers use the platform and when customers shop on stores hosted by Vacto.

We aim to collect only what we need to run the platform and your store. This policy covers data Vacto controls as the platform provider. Sellers are responsible for how they use customer data they receive through their own store.

1. Account data we collect

• Your name, email address, and password (stored only as a secure hash).
• Seller profile details you add: display name, phone/WhatsApp, country, city, business name, category, and social links.
• Login and security data such as sign-in timestamps and session information.

2. Google sign-in data

If you sign in with Google, we receive your verified email address, name, profile picture, and a stable Google account identifier so we can create or link your seller account.

We store provider identity metadata only. We do not store your Google password and we do not keep Google access or refresh tokens.

3. Store and product data

• Store details: name, description, logo, cover image, theme, currency, delivery settings, and payment configuration.
• Catalog data: categories, products, prices, stock, and product images you upload.
• Store requests you submit, including business name, WhatsApp number, and plan preferences.

4. Customer checkout data

When a customer places an order on a store, we process the customer's name, phone number, optional email, delivery governorate/city/address, order notes, items, and order totals so the order can reach the seller.

This order data is made available to the seller who owns the store, because the seller fulfils the order. Vacto processes it to operate the storefront and order tools.

5. Payment reference and proof data

For manual payments (InstaPay, e-wallets), we may process a payment reference and, where provided, a payment-proof screenshot. For seller subscription billing, we process invoices, payment references, and proof you submit to Vacto.

Vacto does not store full card numbers or bank credentials. Manual payments are confirmed by the relevant party (the seller for store orders; Vacto for subscription billing).

6. Support data

When you contact support or open a ticket, we process the messages, category, and any screenshots or files you attach so we can help you.

7. Cookies and session data

We use essential cookies for login sessions, security, and cart functionality, and limited analytics to understand platform usage. See our Cookie Policy for details.

8. How we use data

• To create and operate your account, store, and orders.
• To process subscription billing and manual payment confirmations.
• To provide support and respond to your requests.
• To keep the platform secure, prevent fraud and abuse, and enforce our policies.
• To improve the platform and, where you have opted in, to send product updates.

9. How we share data

We do not sell your personal data.

• With the seller who owns a store, for orders placed on that store.
• With Vacto platform administrators, who can access account, store, billing, and support data to operate the platform and provide support.
• With service providers that host or power the platform (for example, database, file storage, and email delivery), under appropriate safeguards.
• When required by law, or to protect the rights, safety, and security of users and the platform.

10. Retention

We keep data for as long as your account is active and as needed to provide the platform, comply with legal obligations, resolve disputes, and enforce our agreements. Some records (such as billing and order history) may be retained longer where required.

11. Security

We use reasonable technical and organisational measures to protect data, including hashed passwords and access controls. No system is perfectly secure; please keep your credentials safe and contact us if you suspect unauthorised access.

12. Your rights and choices

You may access and update much of your account and store data from your dashboard. You can opt out of product-update emails at any time. To request access, correction, or deletion of personal data we hold as platform provider, contact us.

Email vactoshops@gmail.com or open a support ticket. We may need to verify your identity before acting on a request.

13. Regional context

Vacto serves sellers in Egypt and the wider MENA region. We aim to handle data responsibly and in line with applicable local data-protection rules. This policy does not claim certification under any specific regime.