Privacy Policy
This Privacy Policy explains how AM Soft LLC (the 'Data Controller') collects, uses, and protects your personal information in compliance with GDPR, CCPA, and applicable privacy laws.
Last updated: February 2, 2026
1. Data we collect
We collect the following categories of personal data: (a) Account information: name, email address, phone number, password; (b) Payment information: billing address, payment method details (processed securely by our payment processor); (c) Device information: IMEI, device model, operating system, IP address; (d) Usage data: data consumption, connection logs, app interactions; (e) Support communications: messages, attachments, feedback submitted to customer support.
2. How we use data
We process your data for the following purposes: (a) Service delivery: activating eSIMs, managing your account, and providing connectivity; (b) Payment processing: completing transactions and preventing fraud; (c) Customer support: responding to inquiries and resolving technical issues; (d) Communication: sending order confirmations, service updates, and promotional offers (with your consent); (e) Legal compliance: meeting regulatory obligations and responding to lawful requests; (f) Analytics: improving service quality and user experience.
3. Legal basis for processing
We process your data based on: (a) Contract performance: necessary to provide the services you requested; (b) Legitimate interests: fraud prevention, service improvement, and security; (c) Legal obligation: compliance with tax, accounting, and regulatory requirements; (d) Consent: marketing communications and optional features (you may withdraw consent at any time).
4. Sharing with trusted partners
We share data only when necessary with: (a) Payment processors: our payment processor for secure payment processing; (b) Connectivity partners: mobile network operators to provision eSIM services; (c) Cloud infrastructure: AWS and similar providers for data storage and hosting; (d) Analytics tools: aggregated usage statistics for service improvement; (e) Legal authorities: when required by law or to protect our rights. We do not sell your personal data to third parties.
5. International data transfers
Your data may be transferred to and processed in countries outside your jurisdiction, including the United States. We ensure adequate protection through Standard Contractual Clauses approved by the European Commission and other appropriate safeguards.
6. Security and retention
We apply industry-standard administrative, technical, and physical safeguards including encryption, access controls, and regular security audits. We retain personal data for: (a) Active accounts: duration of service plus 90 days; (b) Purchase records: 7 years for tax and accounting compliance; (c) Marketing consent: until withdrawn; (d) Legal claims: as required by applicable limitation periods.
7. Cookies and tracking
We use essential cookies for site functionality, analytics cookies to understand usage patterns, and marketing cookies for targeted advertising (with your consent). You can manage cookie preferences through your browser settings or our cookie consent tool.
8. Your rights and choices
Depending on your location, you have the following rights: (a) Access: obtain a copy of your personal data; (b) Rectification: correct inaccurate information; (c) Erasure: request deletion (subject to legal retention requirements); (d) Portability: receive your data in a structured format; (e) Objection: oppose certain processing activities; (f) Restriction: limit how we use your data; (g) Withdraw consent: opt out of marketing or optional features. To exercise these rights, contact privacy@novasim.al. We will respond within 30 days.
9. Children's privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware of such collection, we will delete the data promptly.
10. Changes to this policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. Material changes will be notified via email or prominent notice on our website at least 30 days before taking effect.
11. Contact and complaints
For privacy inquiries or to exercise your rights, email privacy@novasim.al or write to AM Soft LLC, Privacy Officer, Tirana, Albania. If you believe we have not addressed your concerns adequately, you have the right to lodge a complaint with your local data protection authority.
Analytics & marketing data
We process the following data for analytics and ad attribution: pseudonymous user identifiers from Google Analytics 4, page views, search terms typed into the AI search, product views, add-to-cart and purchase events, and the source/campaign that referred you to novasim.al. We do not sell this data. Legal basis: your consent (which you can withdraw at any time).