Privacy policy

• Email address — to deliver your eSIM, receipt and invoice, and to log you in.
• Order details — destination country, plan, price, currency and payment status.
• WhatsApp number — only if you choose to give it, for support.
• eSIM technical data — ICCID, activation state and data usage returned by the carrier, so we can show your remaining data.
• Device & usage data — IP-derived country (for currency), browser type, and anonymous analytics events.

We never see or store your card number.

• Contract — delivering the eSIM you paid for and supporting it.
• Legal obligation — tax and accounting records for invoices.
• Legitimate interest — fraud prevention, service reliability, aggregate analytics.
• Consent — optional marketing emails, which you can unsubscribe from at any time.

Only the processors needed to run the service:

• Stripe — payment processing and receipts (PCI-DSS Level 1).
• eSIM carrier partners — to provision your profile in the destination country.
• Supabase — database and authentication hosting.
• Email delivery provider — sending your QR code, receipt and login codes.
• Google Analytics — anonymous, aggregated usage statistics.

We do not sell your data or share it with advertisers.

Order and invoice records are kept for 7 years to meet accounting rules. eSIM usage data is kept while the plan is active and for 12 months after it expires. Account data is deleted within 30 days of a deletion request, except records we must keep by law.

You can ask us to access, correct, export or delete your data, or to stop using it for marketing. Email info@traverrsim.com and we'll respond within 30 days. If you are in the EU/UK you also have the right to complain to your local data protection authority.

All traffic uses TLS (HTTPS), data is encrypted at rest, and access is limited to staff who need it. Because our carriers and infrastructure are global, your data may be processed outside your country under appropriate safeguards.

traverrsim is not intended for children under 13, and we do not knowingly collect their data.