Privacy policy

DeployedSim and your information

DeployedSim determines how information is used to operate this website, manage customer accounts and orders, and provide support. You can contact DeployedSim about privacy or exercise your rights at contact@deployedsim.com.

Information we process

Account information includes your email address, account identifier, sign-in records, language and notification preferences. If you choose Google sign-in, Google supplies basic identity information, which can include your name, email address, profile image and Google account identifier. We use this to authenticate you and connect you to your DeployedSim account. This login does not request access to your Gmail messages, Drive files or contacts.

Order and service information includes the selected destination and plan, price and currency, payment and refund references, delivery status, eSIM identifiers, activation details, validity and supplier-reported usage. For gifts, we also process the recipient details you provide and the information needed to deliver and claim the gift. Please only provide another person's details when you are entitled to do so; recipients can contact us about their information.

Support information includes your messages, order references and technical details you share. Technical information can include IP addresses, browser and device information, access times, security logs and website interactions. Avoid sending passwords, full payment-card details or unnecessary sensitive information to support.

Why we use information

We process information to take steps at your request before a purchase and perform our contract: authenticate you, accept payment, provision and deliver your plan, show usage, process compatible top-ups and resolve service requests. Without the information needed for these tasks, we may be unable to provide the requested service.

We process records where necessary to meet applicable accounting, tax and other legal obligations. Our legitimate interests include protecting accounts, investigating fraud, maintaining service reliability and resolving disputes, subject to your rights and interests. Where consent is the required basis for optional processing, that processing requires your consent and you may withdraw it without affecting earlier lawful processing.

Service providers and sharing

Our service uses Supabase for authentication and database services, Vercel for website hosting, Stripe for payment processing, Resend for transactional email, and eSIM Access and relevant mobile-network partners for eSIM provisioning and connectivity. These providers receive information needed for their respective functions. Google participates when you select Google sign-in and provides website analytics as described below.

Payment-card information is entered through Stripe's payment interface. DeployedSim keeps payment references and status information rather than full card numbers or security codes. Some providers, such as payment services and mobile networks, also process information for their own legal and operational purposes under their own privacy notices.

We may disclose relevant records where legally required, to protect the service and customers, or to establish, exercise or defend legal claims. Access should be limited to the information needed for the relevant purpose.

Cookies and analytics

Authentication cookies and browser storage support sign-in, session security, language preferences and checkout continuity. Blocking essential storage can prevent these features from working.

The public website uses Google Analytics to measure page visits and website interactions. Analytics may use cookies and process device, browser and network information. Our analytics integration excludes sign-in, checkout, order, access and account pages. You can manage stored cookies through your browser and use Google's Analytics opt-out browser add-on. These browser controls are separate from your DeployedSim account settings.

Storage, retention and security

Information may be processed outside your country, including outside the European Economic Area, depending on the service provider and the destination network. Transfers subject to GDPR require a valid transfer mechanism, such as an adequacy decision or standard contractual clauses and any necessary additional measures. Contact us for information about the providers, destinations and safeguards relevant to your information.

Account and service information is retained for as long as needed to provide the service and handle related requests. Payment, tax, fraud-prevention, refund and dispute records may need to remain after account deletion for applicable legal obligations or claims. Retention depends on the record type, purpose, legal requirements and any open dispute; deleting an account does not necessarily erase all transaction records immediately.

We use access controls and other technical measures to protect information. No online service can guarantee absolute security. Keep sign-in codes, installation QR codes and activation details private, because they can grant access to your account or eSIM.

Your choices and rights

Where applicable, you may request access, correction, deletion, restriction or portability of your personal information, object to processing based on legitimate interests, and withdraw consent. These rights have conditions and exceptions, including where records must be retained by law. You may complain to your local data-protection authority; in Romania, this is ANSPDCP.

Account settings provide notification preferences, a data export and an account-deletion request. You may also email contact@deployedsim.com, including if you bought as a guest or received a gift. We may ask for proportionate information to verify your identity. Under GDPR, requests are generally answered within one month, with extensions only where permitted and explained to you.

Turning off optional notifications does not stop messages needed to authenticate you, deliver your purchase or address security and service issues. We do not use Google sign-in information to make automated decisions with legal or similarly significant effects on you.

Updates to this policy

We may update this policy as the service or its obligations change. The date above identifies the current version. Material changes will be communicated where required by applicable law.