Vaporiana Privacy & Security

1. Introduction

This Privacy Policy sets out how we, Vaporiana S.R.L. (“Vaporiana”), use and protect your personal data that you provide to us, or that is otherwise obtained or generated by us. For the purposes of this Privacy Policy, ‘we’,‘us’ and ‘our’ refers to Vaporiana, and ‘you’ refers to you, the user of the Services.

1.1 Privacy and Security is in our DNA

Vaporiana is not logging your data. And we never will do that. Our mission is to keep the app clean of illegal and unauthorized content. So there is no need to pass any data to anyone. We also not sell your data to any company to gain money with it. Our intention is keeping your privacy for real. All transactions and communications are end-to-end encrypted.

1.2. Terms of Service

This Privacy Policy forms part of our Terms of Service, which describes the terms under which you use our Services and which are available at https://vaporiana.io/pages/terms-of-service.html . This Privacy Policy should therefore be read in conjunction with those terms.

1.3. EEA Representative

If you live in a country in the European Economic Area (EEA), the Services are provided by Vaporiana, which for the purposes of applicable data protection legislation is the data controller responsible for your personal data when you use our Services.

2. Legal Ground for Processing Your Personal Data

We process your personal data on the ground that such processing is necessary to further our legitimate interests (including: (1) providing effective and innovative Services to our users; and (2) to detect, prevent or otherwise address fraud or security issues in respect of our provision of Services), unless those interests are overridden by your interest or fundamental rights and freedoms that require protections of personal data.

3. What Personal Data We Use

3.1. Basic Account Data

Vaporiana is a communication service. You provide your mobile number, e-mail address and basic account data (which may include profile name, profile picture and about information) to create a Vaporiana account.

To make it easier for your contacts and other people to reach you and recognize who you are, the screen name you choose, your profile pictures, and your username (should you choose to set one) on Vaporiana are always public. We don't want to know your real name, gender, age or what you like.

We do not require your screen name to be your real name. Note that users who have you in their contacts will see you by the name they saved and not by your screen name. This way your mother can have the public name 'Johnny Depp' while appearing as 'Mom' to you and as 'Boss' to her underlings at work (or the other way around, depending on how these relationships are structured).

3.2. Your Messages

3.2.1. Chats

Every message or call is protected by Vaporiana encryption protocol that secures messages before they leave your device. Your message is delivered securely to your destination. There is no way for us or anybody else without direct access to your device to learn what content is being sent in those messages. We do not store your secret chats on our servers. All chats are decentralized.

3.3. Phone Number and Contacts

Vaporiana uses phone numbers as unique identifiers so that it is easy for you to switch from SMS and other messaging apps and retain your social graph. We ask your permission before syncing your contacts.

You can always stop syncing contacts or delete them from our servers in Settings > Privacy & Security > Data Settings.

If you are using Android, Vaporiana will ask you for permission to access your phone call logs (READ_CALL_LOG). If you grant this permission, Vaporiana will be able verify your account by transmitting a phone call instead of asking you to enter a code. Vaporiana uses this permission only to confirm receipt of the confirmation call by verifying the number in the call log.

3.5. Location Data

If you share a location in a chat, this location data is treated like other messages respectively.

If you share your Live Location in any chat or marketplace, Vaporiana will use your data to display your location to those users with whom you are sharing it, even when the app is closed – for as long as you keep these optional features activated.

3.6. Cookies

The only cookies we use are those to operate and provide our Services on the web. We do not use cookies for profiling or advertising. The cookies we use are small text files that allow us to provide and customize our Services, and in doing so provide you with an enhanced user experience. Your browser should allow you to control these cookies, including whether or not to accept them and how to remove them. You may choose to block cookies with your web browser, however, if you do disable these cookies you will not be able to log in to Vaporiana Web.

4. Keeping Your Personal Data Safe

4.1. Storing Data

If you signed up for Vaporiana from the UK or the EEA, your data is stored in data centers in the Netherlands. These are third-party provided data centers in which Vaporiana rents a designated space. However, the servers and networks that sit inside these data centers and on which your personal data is stored are owned by Vaporiana. As such, we do not share your personal data with such data centers. All data is stored heavily encrypted so that local Vaporiana engineers or physical intruders cannot get access.

4.2. End-to-End Encrypted Data

Your messages, media and files from chats, as well as the contents of your calls and the shopping on the marketplace are processed only on your device and on the device of your recipient. Before this data reaches our servers, it is encrypted with a key known only to you and the recipient. Our encryption is based on 256-bit symmetric AES encryption.

5. Processing Your Personal Data

5.1. No Ads Based on User Data

Unlike other services, we don't use your data for ad targeting or other commercial purposes. Vaporiana only stores the information it needs to function as a secure and feature-rich service.

6. Third Party Payment Services

6.1. Payment Information

Vaporiana does not process payments from users and instead relies on different payment providers around the world. It is the payment providers that handle and store your credit card details. Neither Vaporiana nor the merchants on the platform (sellers) have access to this information. Although we work with payment providers they are completely independent from Vaporiana. Please study their relevant privacy policies before making your data available to them.

6.2. Credit Card Information

When making a purchase, you enter your credit card details into a form supplied by the payment provider that will be processing the payment, and this information goes directly to the payment provider's server. Your credit card information never reaches Vaporiana’s servers. We do not access and do not store your credit card information. When you save your credit card info, it is saved on the respective payment provider's servers and the payment provider gives Vaporiana a token that you can reuse for future payments. It is not possible to reconstruct your credit card info from the token.

6.3 Shipping Information

When you enter shipping information in the process of placing an order, we send it directly to the merchant. You can store your shipping information for you if you choose to save it for future purchases. You can delete this information immediately if you ask us to.

6.4. Payment Disputes

Due to the fact that Vaporiana doesn't store any credit card details or transaction information, it is impossible for us to handle complaints or cashbacks – any disputed payments are the responsibility of the sellers, payment providers, and banks that participated in the exchange.

7. Who Your Personal Data May Be Shared With

7.1. Privacy and Security is in our DNA

Vaporiana is not logging your data. And we never will do that. Our mission is to keep the app clean of illegal and unauthorized content. So there is no need to pass any data to anyone. We also not sell your data to any company to gain money with it. Our intention is keeping your privacy for real. All transactions and communications are end-to-end encrypted.

8. Storage

Accessing external storage for the app because Android devices running Android "R" (Android 11) or later, will require the MANAGE_EXTERNAL_STORAGE permission in order to manage access in shared storage.

Check Yourself

Vaporiana lets you check whether the calls you make and messages you send are end-to-end encrypted. Simply look for the green or orange lock directly in the chat or in the avatar of your contact.