Privacy Policy

1. Information We Collect

We collect information you provide directly to us when using the VelaSim website or mobile applications:

• Account & Identity Data: Your name, email address, preferred language, and currency settings when you create an account or authenticate via Google or Apple Sign-In.
• eSIM & Network Data: Technical identifier details (ICCID, APN, data package usage, network activation timestamps) required to provision and track your mobile data connectivity.
• Payment Information: Transaction details processed securely via Stripe. We do not store clear card numbers on our servers; all payment data is tokenized and PCI-DSS compliant.
• Technical & Device Data: Device model, OS version, IP address, and anonymized app performance metrics to ensure eSIM compatibility and system security.

2. How We Use Your Information

Your data is strictly utilized to operate and improve VelaSim services:

• Provisioning, activating, and delivering digital eSIM profiles and QR codes.
• Monitoring real-time data balance and triggering automated threshold notifications (e.g. 80% & 100% data alerts).
• Processing transactions and issuing downloadable PDF receipts and tax invoices.
• Providing 24/7 customer support and managing support tickets.
• Preventing fraudulent transactions and ensuring security across our REST APIs and mobile apps.

3. Data Sharing & Third-Party Service Providers

We share minimal necessary data only with trusted third-party providers required to operate our service:

• Stripe: Payment processing and PCI-DSS compliant tokenization.
• eSimFly / Network Partners: Provider carrier APIs for instant digital eSIM profile generation and data package topping up.
• Google & Apple: Optional OAuth authentication services when logging in using Google or Apple Sign-In.

We do not sell, rent, or trade your personal information to third-party advertisers or data brokers.

4. Data Retention & Account Deletion

We retain your personal data for as long as your account remains active or as required by law (e.g. financial transaction accounting rules). In compliance with GDPR and App Store Guidelines, you have the right to request full deletion of your account and associated personal data at any time directly through the app settings or by contacting support@velasim.com.

5. Data Security

We implement robust technical and organizational security controls, including HTTPS SSL encryption across all REST APIs, Bcrypt password hashing (minimum 12 rounds), Sanctum Bearer API tokens, and rate-limiting to shield your data against unauthorized access or disclosure.

6. International Data Transfers

Because VelaSim provides international connectivity across 200+ countries, your data may be processed on servers located in the United States and global cloud data centers adhering to international data protection standards.

7. Contact Us & Data Controller

If you have any questions or concerns regarding this Privacy Policy or wish to exercise your privacy rights, please contact the data controller: