Privacy Policy

Account: your name, email address and password (your password is held by our authentication provider, not by us in readable form). Optionally a profile picture.

Orders: your email, name, WhatsApp number if you provide one, any notes you add, and the items, prices and currency of your order.

Messaging choices: whether you asked for order updates by email and WhatsApp, whether you asked for offers on WhatsApp, the wording you agreed to and when, and the number those choices apply to (section 4).

Manual payments: the payment-proof image you upload. These images usually contain personal details from your bank or wallet — please only upload what is needed to show the payment.

Service products: for some services you provide details of your own third-party gaming account, which can include a username, password and backup code. See section 5.

Support: the messages you send to our chat or support address, and our replies.

Reviews: your rating and review text, and a display name. If you have not set a full name, the part of your email address before the "@" is used as that display name — set a name in your account if you would rather it were not.

Technical: when you take certain actions we record the IP address and browser identifier alongside that action, for security and fraud handling. We also read a country signal from your connection to select currency.

To take and deliver your order, to provide support, to handle refunds and disputes, to keep transaction and accounting records, to detect and prevent fraud and abuse, and to operate and secure the site.

We rely on the information above because it is necessary to provide what you asked for, to meet our record-keeping needs, and to protect the store and its customers.

We use service providers to run the store. They receive only what they need:

Supabase — our database, sign-in and file storage, which holds your account, orders, uploads and support history. Stripe and PayPal — payment processing, where enabled; they receive the transaction details needed to take a payment. Resend — sending our emails to you. Sentry — error reporting; it receives an internal account identifier, never your email or the contents of your requests. Vercel — hosting, and optional site analytics. Google Analytics, Microsoft Clarity and PostHog — optional analytics, only if you accept analytics; Microsoft Clarity records how pages are used, including interactions on the page. Upstash — rate-limiting, which briefly uses your IP address as a key.

AI support assistant: if you use the chat, your messages and that conversation's history are sent to our AI provider (Google Gemini or Anthropic) to generate a reply. Product and order-status context may be included so the answer is useful. Your email address, account identifier and payment details are never sent.

WhatsApp (Meta): when a member of our team sends you an order message on WhatsApp, the conversation happens on WhatsApp under Meta's own terms and privacy policy, like any WhatsApp chat you start with us. We do not use WhatsApp's business API or any third-party messaging provider for this; our systems upload nothing about your order to a messaging service.

We do not sell your personal information.

Some of these providers operate outside Egypt, including in the United States, so your information may be processed there.

At checkout you can tick one optional box to receive updates about that order — payment received or under review, payment confirmed, fulfillment in progress, delivery, cancellation or refund — by email and on WhatsApp, plus one message after delivery inviting you to review what you bought. The box is unticked by default and you can place the order without it. Order confirmations and delivery notices are always emailed because we need them to complete your order.

A second, separate box lets you receive offers and news on WhatsApp. It is also optional and unticked by default, and it is never required for order updates. Accepting our Terms is a separate choice and does not imply either box.

WhatsApp messages are sent manually by a member of our team from the store's WhatsApp account, to the number you gave, using a message that contains your order reference, the items, totals, the order's status and a link to your order page. We never send codes, passwords, payment proofs or account details on WhatsApp; those stay on your order page, which only you can open when signed in. We do not use WhatsApp's business API or any messaging provider; your messages are not sent through, or stored by, a third-party sending service on our behalf.

We record your choices as evidence: which boxes you ticked, the exact wording you saw and its version, the number, the language and the time. Each time a team member opens a chat or confirms that a message was sent, we record who did it and when, and a fingerprint of the message — not the message text.

To stop WhatsApp messages at any time, reply STOP (or "إيقاف") in the chat, or tell us by email. A team member records your request and no further WhatsApp message is prepared for that number, on any of your orders, until you tick the box again on a new order. Stopping WhatsApp does not stop the essential order emails. Offers can be stopped separately in the same way.

Some service products require the login details of your own gaming account so our team can perform the purchase or task you ordered.

These are collected only after checkout, never during payment. They are encrypted before being stored, are visible only to the operator working your order, and are permanently deleted once that order is completed, cancelled or closed. If we cannot encrypt them, we refuse to store them rather than keep them unprotected.

We keep a record that details were provided and when they were deleted — not the details themselves.

Some storage is essential and is always used: keeping you signed in, remembering your language and country, keeping your cart and comparison list, and remembering your cookie choice. These are not optional, because the site cannot work without them.

Analytics is optional and off until you accept it. If you accept, we use Google Analytics, Microsoft Clarity, PostHog and Vercel analytics to understand how the store is used. If you decline, none of them run, and no analytics event is sent from our servers either.

Your choice is stored in a cookie on this site for up to a year. You can change it at any time using the "Cookie settings" link in the footer.

We keep information for as long as it is reasonably needed: to deliver and support your order, to keep transaction and accounting records, to handle fraud, security, disputes and refunds, and to meet obligations that apply to us. We do not keep it longer than those purposes require.

Two exceptions you should know about. Payment proofs and the record of payment approvals and refunds are deliberately preserved and cannot be deleted, because they are the evidence that a payment was made and how it was handled. Gaming account details are the opposite — they are deleted as soon as the order is finished (section 5).

Your messaging choices and the record of WhatsApp messages our team prepared are kept with your order records, for the same reasons and for the same period, so we can show what you agreed to and what was sent. They are append-only in normal operation — nobody can edit or delete them through the store — and they are erased or anonymised only through a controlled maintenance procedure, for example when you ask us to delete your data (section 8).

You can update your name and profile picture, and change your notification preferences, in your account. Marketing emails have an unsubscribe link in every message.

To stop WhatsApp messages, reply STOP in the chat or email us; see section 4. To have your messaging records erased, ask us by email (section 10); we then remove the number and your account from those records through the controlled procedure described in section 7, keeping only what the law or our accounting records require.

There is currently no self-service button to delete your account or download your data. To request access to your information, a correction, deletion, or closure of your account, email us and we will handle it — see section 10. Some records, such as payment proofs and payment history, cannot be deleted for the reasons in section 7.

We use encryption in transit, access controls, encrypted storage for gaming account details, and rate limiting. No online service can promise perfect security, and we do not claim to. If something goes wrong that affects you, we will tell you.

For any privacy question or request, email support@ryvostore.com. Please use the email address on your account so we can identify you.

We update this policy as the store changes. The version published here is the current one.