Privacy Policy

1. Who we are

The controller of your personal data is Meridian Networks LLC, a limited liability company organized under the laws of the State of New Mexico, United States, which operates baoesim ("we", "us", "our").

Address: 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, United States
Email: hello@baoesim.com

This policy applies to the baoesim.com website, our checkout, our emails and the eSIM data plans we sell (the "Service").

2. What we collect

2.1 Information you give us

• Email address, so we can deliver your eSIM and send order and service messages.
• Order details: the plan you chose, price, date and order number.
• Messages you send to our support team, and anything you choose to include in them.

2.2 Payment information

Payments are processed by Stripe, Inc. Stripe collects your card details directly. We receive only limited information from Stripe, such as the cardholder name (if provided), card brand, last four digits, expiry date, billing country and postal code, and whether the payment succeeded. Stripe uses your information under its own privacy policy, including for fraud prevention.

2.3 eSIM and usage information

To issue and support your eSIM, we and our Network Partners process technical identifiers such as the eSIM's ICCID and activation code, its installation and activation dates, its status, the amount of data used and remaining, and the network it connected to.

We do not receive the content of your communications, the websites or apps you use, or your browsing history. Our Network Partners process connection data as needed to carry your traffic and to meet their own legal obligations, under their own privacy policies.

2.4 Website information

When you visit baoesim.com, our hosting provider automatically records standard technical information such as your IP address, browser type, the pages you request and the time of your visit. These logs are used to keep the site secure and working.

3. What we don't collect

• We don't require a phone number, passport or home address.
• We don't collect your precise location, contacts or photos.
• We don't use advertising trackers or sell your personal data.

4. How we use your data and why

We don't make decisions about you based solely on automated processing that have legal or similarly significant effects, other than standard automated fraud screening at checkout by Stripe.

5. Who we share it with

We share personal data only with service providers that help us run the Service, under contracts that require them to protect it:

• Stripe, for payment processing and fraud prevention;
• eSIM platform providers and Network Partners, to issue, activate and support your eSIM;
• Email delivery providers, to send your QR code and service messages;
• Hosting and infrastructure providers, including Vercel, to run our website;
• Professional advisors, such as accountants and lawyers, where needed.

We may also disclose information if required by law or valid legal process, to protect our rights or the safety of others, or as part of a merger, acquisition or sale of our business, in which case this policy will continue to apply to your data.

We do not sell your personal data, and we do not share it for cross-context behavioral advertising.

6. International transfers

We are based in the United States, and our service providers may process data in the United States and other countries. Where we transfer personal data from the European Economic Area, the United Kingdom or Switzerland, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK Addendum.

7. How long we keep it

When data is no longer needed, we delete or anonymize it.

8. Security

We use reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS), access controls and payment processing by a PCI DSS certified provider. No system is completely secure, but we work to protect your information and will notify you and the relevant authorities of a data breach where the law requires.

9. Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you and get a copy of it;
• correct inaccurate data;
• delete your data;
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw consent at any time, where we rely on consent;
• lodge a complaint with your local data protection authority.

California and other U.S. states. California residents and residents of other states with privacy laws have the right to know what personal information we collect and how we use it, to request deletion or correction, and not to be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined under California law. You may use an authorized agent to make a request on your behalf.

How to make a request. Email hello@baoesim.com from the address you used to order. We may need to verify your identity before acting on a request. We'll respond within one month (or within the time required by your local law).

10. Cookies

We don't use advertising or analytics cookies. Our checkout uses Stripe, which sets strictly necessary cookies (such as __stripe_mid and __stripe_sid) to process payments securely and prevent fraud. If we ever add optional cookies, we'll update this policy and ask for your consent where required.

11. Children

The Service is not directed at children. You must be 18 or older to buy a plan, and we don't knowingly collect personal data from children under 16. If you believe a child has given us personal data, contact us and we'll delete it.

12. Changes to this policy

We may update this policy. We'll change the date at the top of this page and, if the changes are significant, tell you by email.

13. Contact and complaints

Meridian Networks LLC
1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, United States
Email: hello@baoesim.com

If you're in the EU or UK and you're not happy with our response, you can complain to your local data protection authority.