Privacy

Privacy Policy

How AtlasSIM collects, uses and protects your personal data.

Last updated: July 1, 2026

1. Data we collect

AtlasSIM collects three broad categories of data. First, account data: email address, encrypted password, language and currency preferences, purchase history. Second, technical data: IP address, device type, browser, connection logs, necessary for security and fraud detection. Finally, transactional data: amounts, payment methods used (Mobile Money, cryptocurrencies), transaction IDs provided by our payment providers.

AtlasSIM never sells, rents or monetizes your personal data with third parties for advertising purposes. The only data transfers to third parties are strictly necessary for the performance of the service (payment providers, virtual number providers, technical hosts) or required by law.

Regarding the content of SMS received through our virtual numbers, AtlasSIM only retains this content for as long as strictly necessary for it to be displayed in your interface, and automatically deletes it beyond a reasonable period (30 days maximum), with no use for purposes other than providing the service.

2. Legal basis for processing

The processing of your data is mainly based on performance of the contract between us (provision of the virtual number service), compliance with legal obligations (anti-money laundering, accounting), your consent (non-essential cookies, marketing communications), and our legitimate interest (security, fraud prevention, service improvement).

Each processing purpose is associated with a specific legal basis, documented in our internal processing register. You may at any time request clarification on the legal basis applicable to a specific processing activity by contacting us.

3. Cookies

AtlasSIM uses cookies and similar technologies to ensure the proper functioning of the site, remember your preferences (language, currency, theme) and measure audience in an anonymized manner. The full details of the cookies used, their purpose and retention period are available in our dedicated Cookie Policy.

You can manage your cookie preferences at any time via your browser settings or our consent banner, in accordance with the terms described in the Cookie Policy.

4. Payments and providers

Payments made on AtlasSIM are processed by our specialized providers PawaPay (Mobile Money) and Cryptomus (cryptocurrencies). AtlasSIM never stores your full payment credentials (card number, wallet private keys): this data is exclusively processed by our providers, certified according to the security standards applicable to their industry.

We only receive from these providers the information necessary for accounting reconciliation and fraud prevention: transaction status, amount, transaction ID, and where applicable a partial identifier of the payment method (e.g. the last four digits).

5. Security

AtlasSIM implements appropriate technical and organizational measures to protect your data against unauthorized access, loss, alteration or disclosure: password encryption, encrypted connections (TLS), strict access control to databases via Supabase, network attack protection via Cloudflare.

Our technical teams conduct regular security reviews and apply the principle of least privilege for access to sensitive data. In the event of a data breach likely to pose a risk to your rights and freedoms, we commit to notifying you and the competent supervisory authority within the timeframes required by applicable regulations.

6. Retention periods

We only retain your data for as long as necessary for the purposes for which it was collected, plus any applicable legal limitation periods where relevant. The table below details the retention periods applied depending on the data category.

Upon expiry of these periods, your data is irreversibly deleted or anonymized, unless a legal obligation requires us to retain it longer (for example, for accounting or tax purposes).

Retention periods

Data categoryRetention periodJustification
Account data (email, credentials)Duration of the account + 3 years after closureProof of the contractual relationship and accounting obligations.
Transaction and payment data5 to 10 years depending on jurisdictionLegal accounting and anti-money laundering obligations.
Content of received SMSDeleted within 30 days of receipt, or as soon as use is confirmedData minimization: no retention beyond what is necessary.
Technical and security logs12 months maximumFraud detection and platform security.
Cookies and browsing dataSee our Cookie PolicyWebsite operation and audience measurement.

7. Your GDPR rights

If you reside in the European Union or in a jurisdiction offering equivalent rights, you have a right of access, rectification, erasure, restriction of processing, and data portability, as well as a right to object and a right to withdraw your consent at any time where processing relies on it.

To exercise these rights, you can contact us at the address indicated at the bottom of this page. We respond to any request within a maximum of one month, which may be extended by a further two months for complex requests, with prior notice. You also have the right to lodge a complaint with the competent data protection authority in your country of residence.

8. Sub-processors and third-party services

AtlasSIM relies on carefully selected providers for the technical operation of the service: Supabase for database hosting and authentication, PawaPay and Cryptomus for payment processing, OnlineSim for the provision of virtual numbers and SMS receipt, and Cloudflare for network protection and content delivery.

Each of these providers is bound to AtlasSIM by a contract strictly governing the processing of the data entrusted to them, in accordance with applicable requirements for personal data sub-processing. An updated list of our sub-processors is available on request from our DPO.

9. International transfers

Some of our technical providers may process data outside your country of residence, in particular in connection with infrastructure hosting (Supabase, Cloudflare), which operates data centers distributed globally. Where a transfer of personal data takes place to a country that does not benefit from an adequacy decision, we ensure that appropriate safeguards are put in place (standard contractual clauses, additional security measures).

We select our providers taking into account their data protection commitments and their compliance with recognized international frameworks.

10. Minors

AtlasSIM is not intended for individuals under 18 years of age. We do not knowingly collect data concerning minors. If we become aware that an account has been created by a minor without the required consent, we will delete the account and associated data as soon as possible.

If you are a parent or legal guardian and believe that a minor has created an account on AtlasSIM, please contact us immediately so we can take appropriate action.

11. Data Protection Officer contact

For any question relating to this Privacy Policy or the exercise of your rights, you can contact our Data Protection Officer (DPO) at support@atlas-sim.org, specifying "Data Protection" as the subject of your message.

We are committed to handling your request diligently and in strict compliance with applicable legal deadlines.

Contact our Data Protection Officer

To exercise your GDPR rights or for any question relating to your personal data, contact our DPO.