Privacy Policy

1. Scope of this Policy

This policy applies to data collected through FlyoSIM-owned digital services. It does not apply to independent third-party services that maintain separate privacy notices.

2. Processing Roles

FlyoSIM generally acts as data controller for account, service-operation, and support data. Payment providers, anti-fraud partners, and Merchant of Record providers may act as independent controllers or processors for billing and compliance data under their own legal obligations and contractual terms.

• FlyoSIM support contact: support@flyosim.com
• Payment-related processing includes anti-fraud and chargeback prevention controls.
• Where required by law, partner processing is governed by data-processing agreements or equivalent legal safeguards.

3. Data Categories We Collect

• Account data: email, login identifiers, account status metadata.
• Order data: purchased plan, amount, timestamps, transaction and fulfillment references.
• Technical data: browser/device metadata, network diagnostics, performance logs.
• Service usage data: activation status, plan balance indicators, troubleshooting traces.
• Support data: inquiry records, attachments, issue resolution history.
• Compliance data: risk signals, sanctions-screening flags, dispute/chargeback references, and verification outcomes where legally required.

4. Data We Typically Do Not Store

FlyoSIM does not intentionally store full payment card numbers or CVV values. Sensitive payment credentials are handled by licensed payment providers using tokenized or equivalent secure mechanisms.

5. Data Sources

• Directly from you during registration, checkout, and support communication.
• Automatically from app and browser interactions.
• From payment and risk partners for transaction validation.
• From network and infrastructure partners to support delivery operations.
• From fraud-prevention providers and publicly available sanctions/compliance sources where required.

6. Purposes and Legal Bases

We process personal data for the following purposes:

• Contractual necessity: account operations, order fulfillment, support delivery.
• Legitimate interests: fraud prevention, service hardening, abuse detection, quality improvements.
• Legal obligations: tax, accounting, sanctions compliance, dispute and claims management.
• Consent-based processing when required for optional marketing or similar features.

If local law requires a different legal basis framework, the equivalent lawful basis under that law applies.

7. Fraud Prevention and Security Monitoring

We may use automated and manual controls to identify suspicious behavior, including repeated failed authentication, unusual transaction patterns, and abuse indicators.

We do not use solely automated decision-making to produce legal or similarly significant effects without human review where required by applicable law.

8. Sharing and Disclosure

We share data only when operationally necessary or legally required, including with:

• Payment processors, acquiring partners, and Merchant of Record providers.
• Cloud hosting, monitoring, logging, and analytics providers.
• Carrier and provisioning partners required for service delivery.
• Professional advisors, auditors, and authorized public authorities where required by law.

We do not sell personal data for third-party advertising purposes in the ordinary course of operating FlyoSIM.

9. International Data Transfers

FlyoSIM and its partners may process data across multiple countries. We implement commercially reasonable legal and technical safeguards to protect personal data during cross-border transfer and processing.

Safeguards may include contractual transfer clauses, access controls, encryption, and vendor due diligence.

10. Retention and Deletion

You can initiate account deletion from the Profile area of the signed-in FlyoSIM app. After FlyoSIM accepts the confirmed request, account access is revoked and an asynchronous deletion process begins. A private receipt link lets you check whether the request is pending, processing, retrying, needs review, or is completed.

• Direct account identifiers, credentials, and provider tokens are deleted or anonymized when no longer needed.
• Financial, tax, refund, dispute, and fraud-prevention records that must remain are minimized, pseudonymized where appropriate, access-restricted, and retained only for the applicable legal or operational period.
• Active eSIM, order, payment, support, processor, security-log, and backup data follow their documented service, dispute, security, and expiry obligations; a partial processor failure is not reported as completed.
• Data is deleted, anonymized, or aggregated when its approved purpose and retention period end.

Read the direct account deletion instructions before confirming a request, especially if you have an active eSIM or unresolved refund.

11. Cookies and Similar Technologies

We and service providers may use cookies or similar technologies for login persistence, security controls, session continuity, performance measurement, and reliability improvements.

Browser controls may allow you to manage cookie preferences, but disabling some technologies may affect service functionality.

12. Security Safeguards

FlyoSIM applies layered safeguards including encrypted transport, access restrictions, service monitoring, incident response procedures, and environment controls. No online system can guarantee absolute security.

If a reportable data incident occurs, we will provide notifications as required by applicable law.

13. User Rights

Depending on your jurisdiction, you may have rights to:

• Access and receive a copy of your personal data.
• Correct inaccurate or incomplete data.
• Request deletion, restriction, or objection to specific processing.
• Request portability where legally applicable.
• Withdraw consent for consent-based processing.

Initiate complete account deletion in the signed-in FlyoSIM app under Profile and Delete account. For other privacy requests, contact support@flyosim.com. We may require identity verification before processing requests. Support can assist with deletion issues, but email is not the deletion initiation path.

Subject to law and request complexity, we aim to respond within 30 days, or another period allowed by applicable law.

14. Marketing Preferences

Transactional communications related to orders and account security may still be sent as required for service operation. Optional marketing communications can be unsubscribed via the provided controls.

15. Children and Minors

Services are not intended for children who cannot legally enter binding agreements under applicable law. If data is submitted by or for a child improperly, contact support for review.

16. Policy Updates

We may revise this Privacy Policy to reflect legal, operational, or product changes. Updated versions are posted on this page with a revised "Last updated" date.

17. Related Legal Pages

Terms: https://www.flyosim.com/terms

Refund Policy: https://www.flyosim.com/refund-policy

Pricing: https://www.flyosim.com/pricing

18. Contact and Complaints

Privacy inquiries: support@flyosim.com

If local law provides authority-level complaint rights, you may contact the relevant supervisory authority in your jurisdiction.

This document is for transparency and platform compliance and is not legal advice.