Privacy policy

This explains what we do with your personal data. The short version: we collect what is needed to sell you an eSIM and support it, we do not sell it to anyone, and you can have it back or have it deleted.

The data controller is Tonavira LLC, 30 N Gould St, Ste N, Sheridan, WY 82801, US. For anything about your data, write to support@tonavira.com.

What we collect

• Account: your email address, a name if you give one, and either a password we store only as a hash (we never hold the password itself) or the identifier from the Google, Apple or Facebook account you signed in with.
• Orders: which plans you bought, amounts, dates, and the identifier (ICCID) of each eSIM issued to you.
• Payments: a reference from Stripe identifying the payment, and the amount. No card details reach us at all: not the number, not the last four digits. You type them into Stripe's secure payment fields, which send them straight to Stripe.
• Support: the messages you send us and our replies.
• Technical: IP address, browser and device type, and records of sign-in attempts, kept to keep accounts secure and to block abuse.

We do not ask for your passport, your identity documents or your home address. Some eSIM sellers do, because some countries require registration. We do not sell those plans.

Why we use it, and on what legal basis

• To sell and deliver your eSIM and support it: performance of our contract with you.
• To keep accounting and tax records: a legal obligation.
• To keep the service secure, detect fraud and stop abuse: our legitimate interest in running a service that is not being defrauded, balanced against the fact that we keep only what that needs.
• To send marketing or measure how the site is used: only with your consent, which you give in the cookie banner or by subscribing, and can withdraw at any time.

We do not make decisions about you by automated means that have a legal or similarly significant effect.

Who else sees it

• Stripe: to take payment and handle refunds.
• Our eSIM supply partner: to issue the eSIM itself. We send them what a plan needs, not who you are.
• Our email provider: to send order confirmations, support replies and, if you asked for it, the newsletter.
• Our hosting provider, which stores the data on our behalf under contract.
• Cloudflare, which every visit to the website passes through: it protects the site from attacks and makes it load faster. It sees the pages you open and your IP address, and keeps no account data.
• Analytics: only if you accepted analytics cookies.

Each of these acts on our instructions and may not use your data for their own purposes. We do not sell personal data and we do not share it for anyone else's advertising. We may disclose data where the law requires it.

Where your data goes

We are a United States company, our supply partner is in Asia, our servers are in Germany, and the network that protects the website (Cloudflare, a United States company) handles visits around the world, so your data is transferred across borders. Where data leaves the EEA or the UK, those transfers are covered by the European Commission's standard contractual clauses or another lawful transfer mechanism with each provider.

How long we keep it

• Account data: until you delete your account. Deleting it removes your profile the same day; it does not remove the orders, which we are required to keep (below).
• Orders, payments and invoices: 7 years, because tax law requires it. This survives deleting your account: we keep the transaction, not your profile.
• Support messages: two years, so we can pick up a returning problem. After that your name, your email address and the messages themselves are removed automatically. What is left is a record that a question of some kind was asked and answered, which tells us nothing about you and tells us whether we are getting better at something.
• Security logs: twelve months, after which the IP address is removed automatically.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, export it in a portable form, restrict what we do with it, or object to uses based on our legitimate interest. Where we rely on consent you can withdraw it, which does not undo what was done beforehand.

Most of it you can do yourself: Account → Settings exports your data and deletes your account. Otherwise write to support@tonavira.com and we will answer within 30 days.

If you think we have handled your data badly, please tell us first. But you are entitled to complain to your national data protection authority instead, and in the EU or the UK you may do so in the country where you live or work.

Cookies

We set one essential cookie to keep you signed in; without it the site cannot work. We also keep a few small values in your browser's own storage rather than in cookies: your cookie choice itself, so we do not ask again, and preferences like the currency you picked. They stay on your device; the currency is sent to us only when you check a price or pay, because it decides what we charge. Anything else (analytics and advertising measurement) loads only if you accept it in the cookie banner, and you can change your mind there at any time. Signing in with Google, Apple or Facebook loads that company's own sign-in service, which is covered by its own privacy policy. Facebook's script loads only when you point at or select the Facebook button, not with the page.

Children

Tonavira is not intended for children under 16, and we do not knowingly collect their data. If you believe a child has given us data, write to support@tonavira.com and we will remove it.

Changes

If we change this policy we update the date at the top of the page, and we tell account holders by email when a change matters.