Privacy Policy

This Privacy Policy explains what personal data Yaysim ("we", "us") collects when you use yaysim.com, why we collect it, and the choices you have. It applies to visitors, account holders, and customers.

1. What we collect

• Account data: your email address, used for passwordless sign-in (one-time codes) and order communication.
• Order data: the plans you purchase, order amounts, and status, and the eSIM details (ICCID, activation code, QR code) issued to fulfill your order.
• Usage data forwarded by our provisioning partner: once an eSIM is active, remaining/used data balance, so we can show it to you in "My eSIMs".
• Payment data: handled directly by Stripe. We do not receive or store your full card number.
• Technical data: standard web request data (such as IP address and browser type) collected automatically by our hosting infrastructure for security and reliability purposes.

2. How we use it

• To create and maintain your account, and to authenticate you
• To process orders and deliver eSIMs
• To provide customer support and respond to inquiries
• To detect, prevent, and address fraud, abuse, or technical issues
• To comply with legal obligations

We do not use your data for advertising, and we do not sell your personal data to third parties.

3. Who we share it with

We share the minimum data necessary with the following processors:

• Supabase — hosts our database and handles authentication
• Stripe — processes payments; receives payment details directly from you
• eSIM Access — the wholesale provider that provisions your eSIM and, for the duration your plan is active, reports its data usage back to us

We do not share your data with anyone else except where required by law, or to protect our rights, users, or the public from harm.

4. Cookies

We use only the cookies required for the Service to function — primarily to keep you signed in between visits (set by Supabase Auth). We do not currently use advertising or analytics cookies.

5. Data retention

We retain account and order data for as long as your account is active and as needed to comply with our legal, tax, and accounting obligations. You can request deletion of your account as described in Section 6.

6. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. This includes rights under Jordan's Personal Data Protection Law, and, where applicable, the EU/UK General Data Protection Regulation or other local data protection law. To exercise any of these rights, contact us at support@yaysim.com; we will respond within a reasonable time.

7. International data transfers

Our service providers may process data outside your home country. Where this happens, we rely on those providers' own safeguards (such as standard contractual clauses) for cross-border transfers.

8. Children's privacy

The Service is not directed at children, and we do not knowingly collect personal data from anyone under 18.

9. Security

We use reasonable technical and organizational measures to protect your data, including encryption in transit and row-level access controls on our database. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

11. Contact

For privacy questions or requests, email support@yaysim.com.