Privacy Policy

The operator of SimVoro is the controller of the personal data described in this policy. You can reach us about privacy matters using the contact details at the end of this page.

• Account data: your email address, an optional name, your password (stored only as a salted one-way hash, never in readable form), your preferred language and your account status.

• Wallet and order data: top-ups, purchases, amounts reserved, charged, released or refunded, and when each happened.

• SMS activation data: the temporary number issued to you, the service and country you chose, activation status and times, and messages received on that number, including verification codes.

• Travel eSIM data: the plan and destination you chose, wallet charge, order and supplier references, eSIM installation or QR code information delivered to your account, and available activation, expiry and usage status needed to fulfil and support your order.

• Technical and security data: IP address, browser user agent, session identifiers, sign-in events, rate-limit events and an audit trail of security- and money-related actions.

• Payment data: payments are handled by our payment provider. We receive a payment reference, amount and status — not your full card number. If you turn on monthly auto top-up, our payment provider keeps your card on file to charge it each month; we store the provider's customer, subscription and checkout references, the monthly amount, the plan's status and dates, and the version of the terms you accepted — never your card details.

• Support messages: what you send us when you contact support.

• Business application data: if you apply for a partner account, the business details you give us (business name, trading name, website, country, type of business, how you plan to sell, expected volume and main destinations) and your contact details (name, job title, an optional phone number and anything else you tell us), linked to your account.

We do not ask for, and you should not provide, sensitive data such as health information or government ID numbers.

• To provide the Service — creating your account, issuing temporary numbers, showing received SMS messages, purchasing and delivering travel eSIMs, supporting installation and managing your wallet (performance of our contract with you).

• To keep accurate financial records — the wallet ledger and payment records required for accounting and tax (legal obligation).

• To protect the Service — preventing fraud, abuse and attacks, enforcing limits and investigating misuse (our legitimate interests, and legal obligations where they apply).

• To communicate with you — transactional emails about your account, purchases and security, in your preferred language where available, and replies to support requests.

• To improve the Service — using aggregated statistics such as delivery success rates per country, which do not identify you.

• To review business (reseller) applications — assessing an application for a partner account and contacting you about it (steps you asked us to take before any partner agreement, and our legitimate interests).

Messages sent to a number you rented are routed to us by our telecom partners and stored so that we can show them to you. They are visible only in your signed-in account, and to authorised staff when needed to handle a support request or investigate abuse. We never publish received messages.

We use only essential cookies:

• a session cookie that keeps you signed in. It is marked HttpOnly and Secure, contains only a random token, and is deleted when you sign out or when the session expires;

• a language cookie that remembers the language you chose, so that we can show the site in that language next time.

We do not use advertising cookies or third-party tracking. If we ever add optional analytics, we will ask for your consent where the law requires it and update this policy first.

We do not sell personal data. We share it only with:

• Service providers who process data on our behalf under contract: hosting and infrastructure, network security and content delivery, payment processing, transactional email and machine translation of our website text (which never includes your personal data).

• Telecom and travel eSIM partners that supply temporary numbers or eSIM plans. They receive information needed to fulfil a purchase, provision an eSIM, route incoming messages or report activation status. We do not intentionally share full card details with these partners.

• Authorities when the law requires it, or when necessary to protect the rights and safety of our customers, the public or us.

• A successor if the Service is transferred as part of a merger or sale, subject to this policy.

Our providers and telecom partners may process data in other countries. Where the law requires it, we protect such transfers with appropriate safeguards, such as standard contractual clauses.

• Account, SMS activation and received-message data: for as long as needed to provide your account or activation and address support, fraud and security issues. Account closure does not immediately erase records that must be retained for an unresolved dispute or legal obligation.

• Travel eSIM order, installation and lifecycle data: for the period needed to provide the eSIM, show its details in your account, investigate delivery or network issues, and meet applicable legal obligations. Installation data may be retained for account access and support while the profile remains relevant.

• Wallet, order and payment records: for as long as accounting and tax laws require, which can be several years after the transaction.

• Security logs: for a limited period, then deleted or aggregated.

• Business (reseller) application data: while the application is open and, after a decision, for as long as needed to manage a partner relationship or answer questions about the decision. You can ask us to delete an application you no longer want considered.

We use encrypted connections, store passwords and session tokens only as one-way hashes, restrict internal access, keep an append-only record of money movements and sensitive actions, and keep supplier credentials on our servers only. No system is perfectly secure, but we work to protect your data and will notify you and the authorities of a personal-data breach where the law requires it.

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent you have given. To use these rights, contact us using the details at the end of this page. We may need to verify your identity first.

Some records — in particular wallet and payment records — must be kept even after a deletion request, for as long as the law requires. You also have the right to complain to your local data-protection authority.

The Service is not intended for anyone under 18. If we learn that we hold data about a child, we delete it. See our Terms of Service for the eligibility rules.

We will update this policy when our data practices, providers or services materially change. The “Last updated” date shows the current version, and we will tell you about significant changes on the website or by email.