Privacy
policy.

SubMonitor (“we,” “us,” or “our”) operates submonitor.net and provides global eSIM data plans for travelers. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our services.

We collect the following categories of personal information:

• Account information: full name and email address.
• Payment information: credit card details (processed by Stripe) and cryptocurrency payment details (processed by Plisio). We do not store full card numbers on our servers.
• Device information: device model, EID, and IMEI where required for eSIM delivery and activation.
• Account credentials: password (stored hashed) and authentication cookies.
• Usage data: order history, support communications, and aggregated analytics.

We use the personal information we collect to:

• Process orders and deliver eSIM profiles to your device.
• Manage your account, including sign-in and authentication.
• Process payments and issue refunds where applicable.
• Send service communications about your orders, plans, and account.
• Provide customer support and respond to inquiries.
• Improve our website, products, and services.
• Detect and prevent fraud, abuse, and other illegal activity.
• Comply with applicable legal and tax obligations.
• Send promotional communications — only with your explicit consent, which you can withdraw at any time.

We share personal information only with the following categories of third parties, and only the minimum data necessary to provide our services:

• Stripe — processes credit and debit card payments on our behalf.
• Plisio — processes cryptocurrency payments (Bitcoin, Litecoin, USDT TRC20, and others).
• eSIMAccess — our wholesale eSIM provider; receives only the data required to provision your eSIM profile.
• Email infrastructure providers — for transactional and (with consent) marketing emails.
• Hosting and infrastructure providers — for operating our platform.

We do not sell, rent, or trade your personal information to any third parties for marketing purposes.

We use cookies and similar technologies to keep you signed in, remember your preferences, and measure how visitors use our site. You can disable cookies in your browser settings, but doing so may break parts of the site (such as staying signed in).

• Account data: while your account is active.
• Order and transaction records: 7 years (tax and legal requirements).
• Support communications: 3 years.
• Analytics: anonymized and retained indefinitely.
• Account deletion: personal data removed within 30 days, except where retention is legally required.

Depending on your jurisdiction, you may have the following rights:

• Access — request a copy of the personal data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request deletion of your personal data.
• Restriction of processing — limit how we use your data.
• Data portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent.

To exercise any of these rights, contact us at support@submonitor.net. We respond within 30 days.

We protect your personal information using industry-standard measures including SSL/TLS encryption in transit, encryption at rest for sensitive data, regular security audits, and strict access controls. No method of transmission over the internet, however, is 100% secure.

If you are in the European Economic Area, the United Kingdom, or Switzerland, our legal bases for processing your personal data include: performance of a contract (your orders), legitimate interests (security, fraud prevention, service improvement), your consent (marketing communications), and legal obligation (tax, accounting).

Your information may be transferred to and processed in countries other than your country of residence, including the United States. Where required, we use Standard Contractual Clauses or other approved mechanisms to ensure your data remains protected.

Our services are not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If you believe we have collected information from a child, please contact us so we can delete it.

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects when the latest changes took effect. Material changes will be communicated by email or a prominent notice on our site before they take effect.

If you have any questions about this Privacy Policy or our handling of your personal information, please contact us at support@submonitor.net.