Privacy Policy

This Privacy Policy explains how Configo LTD d.b.a Pelesim ("Pelesim," "we," "us," or "our") collects, uses, shares, transfers, retains, and protects personal information when you use the Pelesim website, applications, customer portal, checkout, eSIM services, and support channels.

By using Pelesim, you acknowledge this policy. If you do not agree, do not use the service. This policy should be read together with our Terms of Service.

• Account information, including your email address, name, and authentication method.
• Billing details, including billing country, transaction references, payment status, and limited payment-method details.
• Order information, including destination, plan, price, currency, purchase time, refund status, and invoice details.
• Support information, including messages, attachments, device details, order references, and troubleshooting context.
• Preferences and communications choices that you submit through the service.

We do not store full payment card numbers. Card payments are processed by Stripe or another disclosed payment processor. App marketplace payments are processed by the applicable marketplace.

To deliver and manage a purchased plan, we may process:

• Provider, order, transaction, and eSIM identifiers, including an ICCID where supplied.
• Installation details such as QR-code URLs, activation codes, and SM-DP+ information.
• Plan status, activation time, expiry time, data allowance, used data, remaining data, and top-up history.
• Coverage, destination, supported network, operator, and fulfillment information.

This information may come from or be shared with the eSIM supplier responsible for fulfilling and operating the plan.

• IP address, approximate country, browser, device, operating system, app version, and language.
• Session, authentication, security, request, error, performance, and diagnostic logs.
• Pages viewed, navigation, referral source, campaign parameters, entry page, and conversion events.
• Cookies and similar technologies used for sessions, security, attribution, preferences, and analytics.

We may receive approximate location from network or CDN headers. We do not need precise GPS location to sell a plan through the website.

We may receive information from:

• Stripe and other payment processors about payments, disputes, refunds, and fraud signals.
• Apple, Google, and other app marketplaces about purchases, receipts, refunds, and account authentication.
• Google or Apple when you choose their sign-in service.
• eSIM suppliers and mobile network partners about fulfillment, installation, activation, coverage, and usage.
• Analytics, hosting, security, email, support, and fraud-prevention providers.

• Create, authenticate, secure, and maintain your account.
• Process payments, apply taxes, issue invoices, and handle refunds or disputes.
• Fulfill eSIM orders, display installation details, refresh usage, and deliver top-ups.
• Send login codes, receipts, service notices, installation guidance, plan alerts, and support responses.
• Prevent fraud, chargeback abuse, scraping, unauthorized access, and other misuse.
• Measure acquisition and service performance, troubleshoot failures, and improve the customer experience.
• Comply with tax, accounting, consumer-protection, sanctions, court, and law-enforcement obligations.

Where GDPR, UK GDPR, or similar laws apply, we rely on one or more of the following:

• Contract, to create accounts, process orders, deliver plans, and provide support.
• Legitimate interests, to secure, measure, maintain, and improve the service and prevent fraud.
• Consent, when we ask for it and you choose to give it.
• Legal obligations, including tax, accounting, consumer, sanctions, and lawful-request requirements.

We may share only the information reasonably needed with:

• eSIM suppliers and network partners that fulfill, activate, operate, or support your plan.
• Payment processors, app marketplaces, invoicing providers, banks, and fraud-prevention services.
• Cloud hosting, content delivery, analytics, monitoring, email, authentication, and support providers.
• Professional advisers, insurers, auditors, and prospective transaction counterparties under appropriate safeguards.
• Courts, regulators, law enforcement, and other authorities when disclosure is legally required or necessary to protect rights and safety.

We do not sell personal information for money.

Pelesim serves travelers globally and uses providers in multiple countries. Personal information may therefore be processed outside your country. International transfers are subject to applicable law and the safeguards available under our service-provider agreements.

We retain personal information for as long as needed to provide the service, maintain security, resolve disputes, enforce agreements, and meet legal, tax, accounting, and fraud-prevention obligations. Retention varies by record type and jurisdiction.

When you delete your account, access is disabled and the account is marked as deleted. Account, order, eSIM, invoice, payment-reference, security, and compliance records may remain linked to an internal account identifier where retention is necessary. Provider-side records may also remain subject to the provider's legal and operational requirements.

Depending on your location, you may have rights to:

• Access, correct, or receive a copy of your personal information.
• Request deletion, restriction, or objection to certain processing.
• Withdraw consent where processing is based on consent.
• Opt out of marketing communications.
• Complain to your local data-protection authority.

We may verify your identity and may retain information where an exception or legal obligation applies. Submit a request through our support form or email [email protected].

Pelesim uses cookies and similar technologies for account sessions, security, visitor attribution, site preferences, and analytics. These technologies may record referral and campaign information, page views, and purchase events. You can control cookies through your browser and any controls made available on the service. Blocking essential cookies may prevent account or checkout features from working correctly.

Pelesim is not directed to children under 18, and we do not knowingly collect personal information from them. If you believe a child has provided personal information, contact us so we can review and remove it where required.

We use administrative, technical, and organizational safeguards designed to protect personal information, including encrypted transport, access controls, authentication controls, logging, and service-provider security measures. No online service is completely secure, so we cannot guarantee absolute security.

Pelesim may link to third-party websites, app marketplaces, mobile networks, or payment pages. Their privacy practices are governed by their own policies, and we are not responsible for services we do not control.

We may update this policy to reflect service, provider, legal, or security changes. The revised date will appear at the top of the page. Where required by law, we will provide additional notice.

Data controller: Configo LTD d.b.a Pelesim. Address: 16 Helkikei HaOr, Beersheba, Israel. Email: [email protected]. You can also contact us through our support form.