Who we are
Wakamo (wakamo.io) is operated by Wakamo.io ("Wakamo", "we", "us"). We sell travel eSIM data plans. This policy explains what personal information we collect, why, and how we handle it.
Privacy Officer: [email protected]
Information we collect
- Account information: your email address, and (if you sign in with Google) your name and profile image as provided by Google.
- Order information: the plans you purchase, amounts paid, currency, order status, and the billing address (country, province/state, and postal code) collected at checkout for billing and compliance.
- eSIM information: technical identifiers needed to deliver and support your eSIM (ICCID, activation code, data usage totals, and validity period), provided by our wholesale eSIM provider.
- Payment information: handled entirely by Stripe. We never see or store your card number. We receive only the payment status, amount, and a reference identifier.
We do not use third-party analytics or advertising trackers. There is no Google Analytics tag, no Meta Pixel, and no advertising cookie on this site, so nothing about your visit is sent to an advertising platform. We set cookies required for sign-in and checkout. If you choose a display currency, the first-party wakamo_currency cookie remembers your CAD or USD preference for up to one year.
How we use your information
- To process payments and deliver the eSIM you purchased.
- To show your orders, QR codes, and data usage in your account.
- To send transactional email: sign-in links, your eSIM QR code, and order status updates. We do not send marketing email without your consent.
- To respond to support requests and process refunds.
- To prevent fraud and comply with legal obligations.
Optional emails and your choices
Fetch reminders help you use an eSIM you already purchased and are on by default. Usage alerts containing top-up offers and review invitations require your separate, explicit opt-in everywhere. We ask after signup; both choices start unchecked. A purchase or account merge does not grant consent.
Change your choices in email preferences, or use a link in any optional email without signing in. Withdrawal applies to the email address that received the message. Essential sign-in, receipt, installation, refund and account-security emails continue. An email already being sent may still arrive.
We record the purpose, consent wording version, time and source of each choice. Current consent and mailbox opt-outs remain while needed to respect your choices; older events are retained for three years after they are superseded. Preference links and completed delivery payloads are cleaned up after 181 days. Links contain no readable email address; forwarding one allows its recipient to stop optional mail to your address.
Who we share it with
We share personal information only with the service providers required to operate Wakamo, each bound by their own privacy commitments:
- Stripe: payment processing (your payment details go directly to Stripe).
- eSIM provisioning: our wholesale provider, which provisions the eSIM profile you purchase.
- Resend: account, purchase and optional email delivery.
- Google: sign-in only, and only if you choose to sign in with Google.
- Cloudflare: network and security infrastructure fronting our servers.
Application error monitoring runs on infrastructure we operate ourselves, not a third-party provider. Diagnostic data is scrubbed to remove personal information before it is stored, and is deleted automatically after 7 days.
We also count page visits on the same infrastructure, to learn which links and campaigns bring people to the site. For each page you open we record the page path, the website or campaign tag that referred you, your browser type, and a one-way hash of your IP address, linked by a random ID that lasts only while the tab is open. Nothing is shared with a third party, and these records are deleted automatically after 400 days.
We do not sell your personal information. Some providers may process data in other countries (e.g. the United States or European Union); where they do, it remains subject to their contractual safeguards.
Retention
We keep account and order records for as long as your account exists and as required for accounting and fraud-prevention purposes. You can request deletion of your account and associated personal information at any time; we may retain transaction records we are legally required to keep.
Your rights
You may request access to, correction of, or deletion of your personal information, and you may withdraw consent to any processing that is not necessary to provide the service you purchased or to meet a legal obligation. Contact us at [email protected] and we will respond within 30 days.
Security
All traffic to wakamo.io is encrypted in transit (TLS). Access to production systems and data is restricted and credential-protected. Payment card data never touches our servers.
Changes
We will post any changes to this policy on this page and update the date above. Material changes will be announced by email to account holders.