Privacy Policy

1. Introduction & Overview

Vastire (“we,” “us,” or “our”) operates the website located at vastire.com (the “Service”). This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you visit our website, purchase products, or interact with our customer service team.

We are committed to maintaining the confidentiality, integrity, and security of your personal data in compliance with applicable United States state and federal privacy statutes, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

2. Information We Collect

When you use our storefront or place an order, we collect certain personal information necessary to fulfill your purchase:

• Customer Identifiers: Full legal name, shipping recipient name, email address, physical delivery address, and telephone number.
• Transaction Data: Ordered product line items, variant specifications (VID/SKU), order totals, and payment processor transaction IDs (e.g., PayPal Order ID).
• Device & Usage Data: IP address, browser type, operating system version, and browsing sessions via standard analytics and server error telemetry.

3. How We Use Your Information

We process your personal information strictly for legitimate commercial and fulfillment purposes:

• To validate, authorize, and fulfill customer orders dispatched from domestic US warehouses.
• To provide automated parcel tracking notifications and order status updates via USPS and affiliated carriers.
• To provide customer support, resolve returns, and issue refunds for damaged or defective items.
• To detect and prevent fraudulent transactions, bot attacks, and automated checkout exploits.
• To comply with legal, tax, and accounting recordkeeping obligations.

4. Third-Party Disclosures & Service Providers

We do not sell, rent, or trade your personal information. We disclose customer data only to essential service partners:

• Fulfillment Partners: CJ Dropshipping API services to dispatch products from domestic distribution centers.
• Carriers & Logistics: United States Postal Service (USPS) and domestic couriers to physically deliver parcels.
• Cloud & Database Infrastructure: Neon PostgreSQL and Vercel Inc. for hosting encrypted transaction records.
• Authentication: Google Firebase Authentication for secure user account access.

5. California Consumer Privacy Rights (CCPA / CPRA)

If you are a California resident, you possess specific rights under California law:

• Right to Know: You may request disclosure of the specific pieces and categories of personal information we have collected.
• Right to Delete: You may request that we delete personal information collected from you, subject to statutory order fulfillment and tax retention exceptions.
• Right to Non-Discrimination: We will never discriminate against you, deny goods, or alter prices for exercising your privacy rights.
• Do Not Sell or Share: We do not sell personal information or share it for cross-context behavioral advertising.

6. Data Retention & Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, acquisition, or disclosure. All web traffic is strictly encrypted using TLS 1.3 / HTTPS. Order records are maintained for the minimum duration required to service customer warranties, return windows, and statutory tax obligations.