This Privacy Policy explains how Tierra Digital Ltd ("SimBuster", "we", "us", "our") collects, uses, shares, and protects personal information when you use the SimBuster apps, websites, dashboards and related services (together, the "Services").

By using the Services, you agree to this Privacy Policy. If you do not agree, please do not use the Services.

1. Who this policy applies to

This Privacy Policy applies to information we process about you when you create an account, purchase or use Numbers, calling, messaging, IVR/AI features, eSIM plans, top-ups or other digital products, referral rewards, and when you visit our websites or contact support.

2. Information we collect

We collect information to operate the Services, provide support, secure the platform, prevent abuse/fraud, comply with law, and improve features. What we collect depends on how you use the Services.

2.1 Information you provide

Account information: phone number (used for login and verification), and optionally email, name, country, and other account settings.

Identity verification (where required): for certain Number types, jurisdictions, withdrawals, fraud prevention, or regulatory compliance, we may request identity and business verification information (for example, name, date of birth, address, company details, and supporting documents).

Profile information: profile name and optional profile photo for your account and/or Numbers.

Contacts (optional): if you grant permission, we may access contact phone numbers from your device to help you find and call/message your contacts. We do not need contact names to provide this feature.

Customer support: information you provide when you contact support (messages, attachments, and any details about the issue).

Referral rewards and payouts: referral code, referred user relationship, eligibility status, payout method details where required, and tax/compliance information where applicable.

2.2 Information we collect automatically

Usage and technical data: device model, operating system, app version, browser type (web), language, time zone, network information, and IP address.

Diagnostics and logs: crash reports, performance metrics, connection logs, security logs, and related diagnostics used for reliability and abuse prevention (typically retained for limited periods).

Call and message metadata: timestamps, originating identifier, destination identifier(s), duration, delivery status and related routing/billing records. This data may be required for billing, troubleshooting, and regulatory compliance.

Message content: we may store message content (such as app chat and SMS/MMS) to deliver messages, sync across devices, and provide history features. You may be able to delete messages in-app; some associated metadata may remain for billing, fraud prevention, and legal/regulatory reasons.

Call recordings, voicemails, transcriptions (optional): if you enable recording, voicemail, transcription, or AI call-handling features, we process and may store the audio and related outputs to provide those features. You are responsible for providing any required notices and obtaining any required consents from call participants.

2.3 eSIM and connectivity data

If you purchase or use an eSIM plan, we and our connectivity Partners may process identifiers and usage information to provision and operate the plan. This can include the ICCID and other eSIM/profile identifiers, plan status, data usage, activation events, and network/session information.

Network operators may generate and process network records (including approximate location derived from network connectivity) as part of providing roaming/connectivity services. We do not control operator systems and their processing may be governed by their own policies and applicable telecom regulations.

2.4 Website cookies and analytics

Our websites may use cookies and similar technologies to keep you signed in, remember preferences, prevent fraud, and understand website performance.

We may use analytics tools to understand how users interact with the Services. We do not sell personal information and we do not use your personal information for cross-context behavioral advertising.

3. How we use information

We use personal information for the following purposes:

• Provide and operate the Services (create accounts, provision Numbers, deliver calls/messages, provision eSIMs, provide IVR/AI features).
• Process payments, issue receipts/invoices, manage subscriptions and balances, and handle refunds/chargebacks.
• Provide customer support and send service communications (security alerts, verification codes, plan notices).
• Security, safety and fraud prevention (detect misuse, spam, suspicious activity; enforce our Terms; protect users and Partners).
• Compliance and legal obligations (telecom requirements, accounting/tax obligations, lawful requests).
• Improve and develop the Services (debugging, performance measurement, feature improvements). We may use aggregated or de-identified data where appropriate.

4. When we share information

We do not sell your personal information. We share information only as necessary to provide and secure the Services, and as described below.

• Telecom and connectivity Partners: carriers, aggregators, number providers, roaming/eSIM providers, and related vendors to provision Numbers/eSIMs and route communications.
• Service providers: cloud hosting/storage, analytics, customer support tools, fraud prevention, identity verification providers, and payment processors (who process payments on our behalf).
• Legal and compliance: where required by law, regulation, court order, or lawful request; to protect rights, safety, and property of users, us, or others; or to investigate and prevent fraud/abuse.
• Business transfers: if we are involved in a merger, acquisition, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to appropriate safeguards.

5. International transfers

We may process information in Hong Kong and other countries where we or our service providers and Partners operate. Where required, we use appropriate safeguards for international transfers (for example, contractual protections and security measures).

6. Data retention

We keep personal information only as long as necessary for the purposes described in this Privacy Policy, and as required or permitted by law.

Retention periods vary depending on the type of data and the reasons for processing. For example:

• Account data is retained while your account is active and for a reasonable period thereafter, unless deletion is requested and permitted.
• Billing, tax and regulatory records may be retained for required periods.
• Diagnostics logs are typically retained for shorter periods unless needed for security investigations.
• Messages and recordings may be retained to provide your history features and as required for fraud prevention, dispute handling, and regulatory reasons. You may be able to delete certain content in-app, subject to limitations above.

7. Your choices and rights

Your rights depend on where you live and the laws that apply to you. Depending on your location, you may have rights to access, correct, delete, or receive a copy of your personal information; to object to or restrict certain processing; and to withdraw consent where processing is based on consent.

You can often manage certain settings within the app (for example, marketing preferences, permissions, and deletion of certain content).

To exercise your rights or ask questions, contact us at support@simbuster.com. We may need to verify your identity before responding.

8. Account deletion

You may request deletion of your account via the app or by contacting support.

Where permitted by law, we will delete or anonymize personal information associated with your account. We may retain certain information where necessary for legal, regulatory, security, fraud prevention, dispute resolution, and audit purposes, and to meet telecom and accounting obligations.

9. Security

We use technical and organizational safeguards designed to protect personal information, including encryption in transit, access controls, monitoring, and vendor due diligence.

No system is 100% secure. You are responsible for keeping your device secure and your credentials confidential.

10. Children

The Services are not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us and we will take appropriate steps.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to notify you (for example, via the app or our website).

12. Contact

Tierra Digital Ltd can be contacted via the contact us form