Privacy Policy

1. Introduction

Esimra ("we," "us," or "our") operates the esimra.com website and eSIM storefront. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our services.

By using our services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Information you provide

• Email address — required to deliver your eSIM QR code and order confirmations.
• Payment information — processed securely by Stripe. We do not store credit card numbers on our servers.
• Promo codes — if you apply a promotional or referral code during checkout.

Information collected automatically

• Usage data — pages visited, time spent, browser type, device type.
• IP address — for fraud prevention and approximate geolocation.
• Error logs — anonymized error reports to improve service reliability (via Sentry). Personal identifiers such as email addresses and ICCID numbers are automatically scrubbed before transmission.

3. How We Use Your Information

• Process and deliver your eSIM order.
• Send transactional emails (order confirmation, eSIM delivery).
• Provide customer support related to your orders.
• Detect and prevent fraud or abuse.
• Improve our services through anonymized analytics and error monitoring.
• Comply with legal obligations.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Third-Party Services

We use the following third-party services to operate:

• Stripe — payment processing. Subject to Stripe's Privacy Policy.
• Supabase — database and authentication infrastructure.
• Resend — transactional email delivery.
• Sentry — error monitoring with PII scrubbing enabled.
• Vercel — hosting and content delivery.

Each of these providers has their own privacy policies governing how they handle data.

5. Data Retention

We retain your order data for as long as necessary to fulfill the purposes outlined in this policy, typically for the duration of your eSIM validity plus 12 months for support and compliance purposes.

Payment records are retained as required by applicable tax and financial regulations.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption in transit (HTTPS/TLS).
• Row-level security policies on our database.
• Automatic PII scrubbing in error monitoring and logging systems.
• Restricted access to customer data on a need-to-know basis.

No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict processing of your data.
• Data portability.

To exercise these rights, contact us at support@esimra.com.

8. Cookies

We use essential cookies to maintain session state and security. We do not use advertising or tracking cookies. Third-party services (such as Stripe) may set their own cookies as part of the payment process.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy, contact us at:

support@esimra.com