Privacy Policy

ESIMOFFICE LLC, a limited liability company formed in the State of Wyoming, United States, operates eSIM Office at esimoffice.com. For privacy questions and requests, contact security@esimoffice.com.

For our own customer relationship — company registration, billing and platform administration — ESIMOFFICE LLC acts as data controller. For employee data that a company enters or imports in order to assign eSIMs, the customer company is the controller and ESIMOFFICE LLC acts as processor, following that company's instructions.

• Company and administrator data: company legal name, billing country and address, administrator name, business email, account role, and order and invoice history.
• Employee data: first and last name, business email, position, department, permissions granted by the company administrator, assigned plans, eSIM identifiers (ICCID) and carrier-reported data usage for those plans.
• Reseller and partner data: contact details, assigned countries and accounts, commission records and API key fingerprints.
• Technical data: authentication events, security and error logs needed to operate and protect the service.

We do not collect browsing history, message content, contacts, device location or GPS data, and we never store personal payment card details.

• Performance of a contract: creating accounts, provisioning eSIM profiles, delivering activation codes, invoicing and support.
• Legitimate interests: fraud prevention, platform security, service improvement and reseller commission accounting.
• Legal obligation: retaining financial and tax records and responding to lawful requests.
• Consent: optional communications, where applicable, which can be withdrawn at any time.

We share data only to the extent needed to run the service:

• Managed cloud database, storage and edge compute providers hosting the platform.
• Stripe, Inc. for payment processing and card verification.
• Authorised wholesale eSIM and carrier partners, which receive the technical details needed to issue and activate a profile.
• A transactional email provider used to send activation codes, invitations and password links.

ESIMOFFICE LLC is established in the United States and its providers may process data in the United States and the European Union. Where data is transferred from the EEA or United Kingdom, we rely on Standard Contractual Clauses. A Data Processing Addendum including those clauses is available on request.

Account and employee profiles are kept while the company account is active and are deleted on request by the company administrator. Invoices, payment records and order history are retained for the periods required by applicable accounting and tax law. Security logs are kept for a limited period, then deleted.

Subject to applicable law, you may request access to your data, correction, deletion, a copy in a portable format, restriction of processing, or object to processing based on legitimate interests. Employees should normally contact their own company administrator first, as the company controls that data; you can also write to security@esimoffice.com and we will assist. We do not sell personal data.

We apply database-level isolation between companies, TLS 1.3 in transit, AES-256 encryption at rest, hashed API keys and role-based access controls. See our security page for details.

We may update this policy as the service evolves. Material changes will be announced to account administrators and the updated date at the top of this page will change.