Privacy Policy

1. Introduction

The Company is committed to protecting your privacy and handling your personal information with transparency, integrity, and care. We collect and process personal data only where it is necessary to provide our services and fulfill legitimate business purposes.

By accessing, registering for, or using the Platform — including creating an account, purchasing eSIM services, or otherwise submitting personal data (collectively, the “Services”) — you acknowledge that you have read, understood, and agreed to this Policy and consent to the processing of your personal data as described herein.

2. Data We Collect

2.1 Personally Identifiable Information

We may collect the following personally identifiable information when you voluntarily provide it through the Platform:

Full name (first and last)
Email address
Phone number
Billing and payment information (processed securely via Stripe — see Section 3)
Account login credentials
Communications submitted through contact forms, chat, surveys, or support requests

This information is used to create and manage your user account, provide our services, process payments, prevent fraud, communicate with you, provide customer support, send service-related notices, conduct analytics, and send marketing communications where consent has been provided.

The Company does not sell or rent personal data to third parties.

2.2 Automatically Collected Information

When you access the Platform, we may automatically collect non-personally identifiable information such as IP address, browser type and language, device type and operating system, pages visited, referring URLs, and access times. This data is used to analyze trends, administer the Platform, improve performance, and enhance the user experience.

2.3 Sensitive Personal Data

The Company does not request sensitive personal data, including government-issued identification, health or medical information, biometric data, religious beliefs, or criminal history. If you voluntarily submit any such information, you consent to its processing in accordance with this Policy.

3. Payment Processing (Stripe)

All payments on the Bayanat eSIM Platform are processed securely through Stripe, a leading global payment infrastructure provider. Stripe is certified to PCI Service Provider Level 1.

The Company does not store, process, or transmit your full card number, CVV, or other sensitive payment credentials on its own servers. All payment data is transmitted directly to Stripe using industry-standard TLS encryption. Stripe's privacy policy is available at stripe.com/privacy.

4. Cookies, Pixels & Tracking Technologies

The Company uses cookies, pixels, and similar tracking technologies to enable essential Platform functionality, remember your preferences, analyze usage and performance, and deliver relevant advertising.

4.1 Google Analytics

We use Google Analytics to understand how users interact with our Platform. We have enabled IP anonymization to minimize the collection of personally identifiable location data. You may opt out by installing the Google Analytics Opt-out Browser Add-on or adjusting your browser's cookie settings.

5. How We Use Your Information

To operate, maintain, and improve the Services
To provide customer support and respond to inquiries
To process payments via Stripe and prevent fraudulent transactions
To communicate with you about your account, orders, or service updates
To send transactional and service-related messages
To send marketing communications, where you have provided consent
To comply with applicable laws, regulations, and legal processes
To protect the rights, safety, and property of the Company and its users

You may opt out of marketing communications at any time by clicking the unsubscribe link in any email or by contacting us at hello@bayanat.app.

6. Disclosure of Information

The Company does not sell or rent your personal data. We may disclose personal data only with your explicit consent, to service providers acting on our behalf under confidentiality agreements, to comply with applicable laws or court orders, in connection with a merger or acquisition (where the acquiring entity agrees to honor this Policy), or to protect the rights, safety or property of the Company, its users or the public.

7. Your Privacy Rights

Right of Access — request a copy of the personal data we hold about you
Right to Rectification — request correction of inaccurate or incomplete data
Right to Erasure — request deletion of your personal data, subject to legal obligations
Right to Restriction — request that we limit the processing of your data
Right to Portability — receive your data in a structured, machine-readable format
Right to Object — object to certain types of processing, including direct marketing
Right to Withdraw Consent — withdraw previously given consent at any time

To exercise any of these rights, please contact us at hello@bayanat.app.

8. Children's Privacy

The Platform is not directed to children under the age of 13. The Company does not knowingly collect personal data from children under 13. Users between the ages of 13 and 18 must obtain parental or legal guardian consent to use the Platform, where required by applicable law.

9. International Data Transfers

The Company is headquartered in the United States. Your information may be processed and stored in the United States or other jurisdictions where the Company or its service providers operate. Where required, we implement appropriate safeguards — such as standard contractual clauses or equivalent mechanisms — to protect personal data transferred across borders.

10. Data Security

Transport Layer Security (TLS) encryption for data in transit
Encrypted storage for sensitive data at rest
Access controls and role-based permissions
Regular security assessments and monitoring
Secure third-party payment processing via Stripe (PCI-DSS Level 1 certified)

While we take reasonable precautions to protect your data, no system is entirely immune to security risks. You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account.

11. Data Retention

The Company retains personal information only for as long as necessary to fulfill the purposes outlined in this Policy, or as required by applicable law. When personal data is no longer needed, it is securely deleted or anonymized.

12. Third-Party Links

The Platform may contain links to third-party websites or services. This Policy does not apply to those external sites. We encourage you to review the privacy policies of any third-party services you access through our Platform.

13. Changes to This Policy

The Company reserves the right to update this Privacy Policy at any time. Material changes will be communicated via the Platform or by email prior to the changes taking effect. Your continued use of the Platform following the effective date of any changes constitutes your acceptance of the revised Policy.

Wavai Technology LLC · hello@bayanat.app · www.bayanat.app · Sharjah Media City (Shams), Al Messaned, Al Bataeh, Sharjah, United Arab Emirates

Company Information