Last updated: 30 September 2026
The definitions from the Terms and Conditions (the “Terms”) shall apply to this Privacy Policy, unless otherwise provided for by this Privacy Policy.
1.1The Platform, made available under the brand name “OnlineSIM” at onlinesim.io, is operated by ONLINE CONNECTION TECH PTE. LTD. (UEN – 202604203W), a company incorporated in Singapore (the “Provider”, “we”, “us”, “our”).
1.2This Privacy Policy explains how we collect, use, store, disclose and otherwise process information relating to an identified or identifiable natural person (“Personal Data”) when you access or use the Platform and/or the Platform Services as a visitor or user (the “Client” or “you”).
1.3If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at support@onlinesim.io (or another email published on the Platform from time to time).
1.4We have designated a Data Protection Officer (“DPO”) responsible for our compliance with applicable data protection law, including the Personal Data Protection Act 2012 of Singapore. You may contact our DPO by email at support@onlinesim.io (please mark your message “Attn: Data Protection Officer”).
2.1We are committed to protecting your privacy. We process Personal Data in accordance with applicable law and the principles of lawfulness, fairness and transparency, purpose limitation, data minimization, accuracy, storage limitation, confidentiality and accountability.
2.2The Provider acts solely as a technical intermediary and as a commercial agent of the Third-Party Providers. The underlying Connectivity Services (including Connections, Active Numbers, delivery/routing and network performance) are supplied and performed by Third-Party Providers and external networks. The Personal Data may be processed in connection with such Connectivity Services to the extent necessary to enable the Platform Services.
3.1We process the following categories of Personal Data depending on how you use the Platform, which Tariffs you select, and which features you use.
o Account and profile data (“Account Information”), such as first name, last name; address; contact details; date or place of birth; profile photo or identification photograph; government-issued identification details; OAuth and social sign-in identifiers, together with the basic profile information (such as name, email address and profile picture) that we receive from Google or another identity provider when you choose to register or sign in through your account with that provider, as further described in Section 7; any other personal details submitted during registration or use of the Platform or the Platform Services.
o Purchase, billing and payment-related data (“Payment Data”), such as account top-ups, transaction records, payment instruments data.
o Service usage and technical data (“Service Usage Records”), such as information about purchased Connections and Active Numbers; technical and usage logs; messages/SMS received on those numbers and related metadata; and other related information.
o Communications and support data, such as support tickets and correspondence with you.
o Cookies and analytics data.
3.2For the avoidance of doubt, your card details will be collected by the payment service providers engaged by us. All card information is transmitted directly between your device and the payment service provider using SSL secure encryption.
4.1“Legal basis” means the lawful ground under applicable data protection law that allows us to process your Personal Data.
4.2Depending on the context, we rely on one or more of the following legal bases:
o Performance of a contract (processing is necessary to provide the Platform and Platform Services under the Terms);
o Legitimate interests (necessary for our legitimate interests or those of a third party, e. g., payment services provider, preventing fraud and abuse, services quality); and
o Consent (where we ask for your consent for certain cookies or marketing, where required).
4.3Purposes and legal bases by category:
| No. | Purpose | Data Category | Legal Basis |
|---|---|---|---|
| 1 | To register you (including via Sign in with Google or another third-party account), maintain your Account, and provide the Platform Services | Account Information; Service Usage Records | Performance of a contract; Legitimate interests |
| 2 | To process payments, prevent payment fraud, handle refunds, payment disputes and chargebacks, and maintain accounting | Account Information; Payment Data | Performance of a contract; Legitimate interests |
| 3 | Customer support and communications | Account Information; Service Usage Records; Communications and support data | Performance of a contract; Legitimate interests |
| 4 | Informational messages; marketing; cookies | Account Information; Communications; Cookies and analytics data | Consent; Legitimate interests |
We collect the Personal Data:
5.1directly from you (e. g., when you register, contact support, or submit information);
5.2automatically when you use the Platform (e. g., logs and cookies); and
5.3from third parties, namely Google or another identity provider when you choose to register or sign in through your account with that provider (limited to the information described in Section 7), and our payment service providers (e. g., payment confirmation, refund and chargeback status and fraud-prevention signals).
We may share the Personal Data with:
6.1Third-Party Providers supplying Connectivity Services to enable the Platform Services;
6.2service providers engaged by us to operate the Platform (e. g., hosting/infrastructure, analytics, customer support tools, email delivery, fraud prevention, and payment processing, including the handling of refunds, payment disputes and chargebacks);
6.3professional advisers (lawyers, auditors, accountants) where necessary; and
6.4competent authorities where required by applicable law or where reasonably necessary to protect rights, security, and safety.
6.5We share only the minimum information reasonably necessary for the relevant purpose. We do not sell Personal Data.
7.1The Platform allows you to register and sign in using your Google Account (“Sign in with Google”) or an account with another identity provider (such as Facebook, Telegram or VK). When you choose Sign in with Google, we request access, through Google’s OAuth 2.0 authorization service and subject to your consent on the Google consent screen, only to the basic profile information associated with your Google Account, namely your Google Account identifier, email address, name and profile picture (corresponding to the “openid”, “email” and “profile” scopes) (“Google User Data”). We do not request or receive access to any other content of your Google Account (such as Gmail, Google Drive, Contacts, Calendar or Photos), and we do not receive your Google password.
7.2We use Google User Data solely to: (a) create your Account and authenticate you when you sign in; (b) link your Account to your Google Account so that you can sign in again in the future; (c) pre-fill your profile (name, email address and profile picture) in your Account; and (d) send you service-related communications (such as account, payment and support notifications) to the email address associated with your Google Account. We do not use Google User Data for any other purpose, including for developing, improving or training artificial intelligence or machine learning models. The legal basis for this processing is the performance of a contract (see Section 4).
7.3Google User Data is stored as part of your Account Information on the infrastructure of the hosting providers referred to in Section 6 and is protected by the security measures described in Section 10, including encryption in transit. Access tokens issued by Google are used only to complete the sign-in process and are not used to access your Google Account for any other purpose. Google User Data is retained in accordance with Section 9 and is permanently deleted together with your Account Information (i. e., 30 days after the Last Activity, as defined in the Terms) or earlier upon your deletion request.
7.4We do not sell Google User Data and we do not share it with any third party, except: (a) with the service providers that process it on our behalf to operate the Platform (e. g., hosting, customer support and email delivery providers) as set out in Section 6 and under contractual confidentiality obligations; (b) where required to comply with applicable law, legal process or enforceable requests of competent authorities; (c) where necessary for security purposes, such as investigating abuse or fraud; or (d) as part of a merger, acquisition or sale of assets, in which case you will be notified and this Privacy Policy will continue to apply. We do not transfer Google User Data to advertising platforms, data brokers or information resellers; we do not use it for serving advertisements (including retargeting, personalized or interest-based advertising); and we do not use it to determine credit-worthiness or for lending purposes.
7.5OnlineSIM’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
7.6You may revoke our access to your Google Account at any time through your Google Account permissions page at https://myaccount.google.com/permissions or by deleting your Account. Revocation does not affect the lawfulness of processing carried out before revocation; Google User Data already collected will be deleted in accordance with Section 9, unless you request earlier deletion under Section 11.
7.7Where you register or sign in using another identity provider (such as Facebook, Telegram or VK), we receive only the account identifier and the basic profile information (such as name, email address and/or username) that the provider makes available with your consent, and we process such information in the same manner as described in this Section 7. Your use of the identity provider’s services is subject to that provider’s own terms and privacy policy.
8.1Your Personal Data may be processed in countries other than your country of residence, including where our service providers are located. Where required by applicable law, we implement appropriate safeguards for such transfers (such as contractual data protection obligations imposed on our service providers).
9.1We retain Personal Data only for as long as necessary to achieve the purposes set out in this Privacy Policy, but in any event for a limited period of time. Please refer to Section 11 of the Terms (Data Retention, Account Deletion and Balance Forfeiture) and the Data Retention Limitation Policy for details.
9.2In particular: (a) Service Usage Records (including messages/SMS received on Active Numbers, technical and application logs, visit and device information and customer support tickets) are retained for 30 days from the time the relevant record is created and are then permanently deleted; and (b) Account Information (including Google User Data and other sign-in identifiers) is retained for 30 days from the Last Activity (i. e., the last completed purchase on your Account); if no new purchase occurs within that period, your Account and all Account Information are automatically and permanently deleted. A longer retention period applies only where required or permitted by applicable law (e. g., for accounting, tax, anti-fraud or dispute-handling purposes).
9.3You may request deletion of your Account and Personal Data at any time as described in Section 11. Once the applicable retention period has expired or a deletion request has been fulfilled, the Personal Data is permanently deleted and cannot be restored.
10.1We take information security seriously. We apply administrative, technical and organizational measures designed to protect Personal Data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access. These measures include encryption of data in transit (TLS/HTTPS), access controls that restrict access to Personal Data to authorized personnel on a need-to-know basis, logging and monitoring of access to our systems, and the handling of payment card data exclusively by our payment service providers (see Section 3.2).
11.1Depending on your location and applicable law, you may have the right to:
o request access to your Personal Data;
o request correction of inaccurate or incomplete data;
o request deletion (where there is no lawful basis to continue processing);
o withdraw consent at any time (where processing is based on consent); and
o lodge a complaint with a competent data protection authority.
11.2To exercise your rights, contact us at support@onlinesim.io. We may request information necessary to verify your identity (including Client Identification where appropriate) before fulfilling a request.
12.1We use cookies and similar technologies to operate the Platform, maintain sessions, remember preferences (such as language), and improve performance and user experience.
12.2You can control cookies through your browser settings, including deleting cookies and disabling them in the future. If you disable cookies, some features of the Platform may not work properly.
12.3Like most websites, we also use Google Analytics to track user interaction. We use this data to determine the number of people using our website, to better understand how they find and use our web pages, and to see their journey through our website. Google Analytics records data such as your geographical location, device, internet browser and operating system, and your internet connection IP address. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.
13.1We may amend this Privacy Policy from time to time by posting an updated version on the Platform. The “Last updated” date at the top indicates when it was last revised.
14.1Only the English version of this Privacy Policy has legal effect. Any translations are provided for convenience only.