SimGate Privacy Policy

Last updated: 9/11/2025

This Privacy Policy explains how SimGate ("we", "us") collects, uses, and protects personal data when you use our website, dashboard, API, and mobile applications (the "Service").

1) Data We Collect

  • Account & Billing: name, email, Stripe customer/payment identifiers, subscription status.

  • Usage & Devices: device identifiers (e.g., model, deviceId you register), connection status, basic logs necessary to operate and secure the Service.

  • SMS Routing Only (No Storage): SimGate relays SMS between your device and the recipient. We do not persist SMS message content or recipient lists in our databases. Message content may be processed transiently in memory or short-lived logs strictly for delivery/abuse prevention and is not retained.

2) How We Use Data

  • To provide and operate the Service and our APIs.

  • To process payments and manage subscriptions (Stripe).

  • To secure, monitor, and improve the Service.

  • To communicate with you (support, updates, billing notices).

  • To comply with legal obligations and prevent abuse/spam.

3) Legal Bases (GDPR)

  • Contract: to provide the Service you requested.

  • Legitimate interests: security, quality, analytics (page views only unless you consent otherwise).

  • Legal obligation: tax, accounting, fraud prevention.

  • Consent: where required by law (e.g., marketing emails).

4) Processors / Sharing

We share data with service providers who help us run SimGate, such as:

  • Stripe (payments & subscriptions).

  • Firebase (authentication).

  • Hosting, logging, analytics, and email providers.

We do not sell personal data. We may disclose information if required by law or to protect our rights, users, or the Service.

5) Data Retention

We retain account/billing records as required by law. We do not retain SMS message content. Limited technical metadata (e.g., success/failure timestamps) may be kept briefly for troubleshooting, fraud prevention, and service quality, then deleted or anonymized.

6) Security

We use reasonable technical and organizational measures to protect data. No system is 100% secure; you are responsible for safeguarding your account credentials and devices.

7) Your Rights

Subject to local law, you may have rights to access, correct, delete, or port your data, and to object or restrict certain processing. To exercise rights, contact privacy@simgate.app. For general support: support@simgate.app.

8) International Transfers

We may process data on servers outside your country. Where required, we use appropriate safeguards (e.g., SCCs) for international transfers.

9) Children

The Service is not directed to children under 16, and we do not knowingly collect their personal data.

10) Changes

We may update this Policy from time to time. Material changes will be notified by email or via the dashboard. Continued use means you accept the updated Policy.

11) Contact

For privacy requests or questions, email privacy@simgate.app. For general support: support@simgate.app.