1Who we are and scope
This Privacy Policy applies to the SIMSIM website, user and admin-facing platform, support channels and related tracking services operated by SIMSIM Global Commerce, headquartered in Mumbai, India. It should be read with our Terms & Conditions.
We process digital personal data in accordance with applicable Indian privacy and information-technology law, including requirements applicable under the Digital Personal Data Protection framework as they come into force.
2Personal data we collect
Account and identity data
- display name, mobile number, account identifier, account status and registration date;
- hashed PIN or authentication records, login attempts, lock status and session information;
- support messages and communications.
Tracking data
- vehicle registration numbers, optional nicknames, toll names, timestamps, coordinates, mapped addresses and saved vehicle history;
- SIM or mobile numbers, operator information, consent status, tracking status, location, timestamps and SIM history;
- refresh intervals, search activity and report selections.
Payment and credit data
- credit balance, usage history, plan and transaction records;
- payment status and gateway references;
- manual payment proof, such as a UTR/reference number or screenshot that you choose to submit.
Technical data
- IP address, browser and device information, user agent, timestamps, security and audit logs;
- cookies or similar session technologies necessary to keep you signed in and protect the service.
3Where data comes from
We receive data directly from you, from authorised users acting for an organisation, from drivers or subscribers responding to provider consent requests, and from service providers used for telecom, consent, FASTag, toll, mapping, address lookup, hosting, support and payment processing.
Third-party provider results may contain inaccuracies or delays. SIMSIM may validate, quarantine or correct suspicious location information to protect map quality and users.
4How and why we use data
- create, authenticate, secure and administer your account;
- perform requested vehicle, FASTag and SIM tracking functions;
- initiate, check and record SIM consent status;
- display maps, addresses, timestamps, history and reports;
- operate credits, payments, manual verification and billing records;
- provide support and real-time chat;
- detect fraud, abuse, security incidents, unauthorised access and service errors;
- maintain audit, compliance and dispute records;
- improve reliability, validate locations and troubleshoot provider integrations;
- comply with legal obligations and respond to lawful requests.
Depending on the context, processing may be based on your consent, the consent of the relevant data principal, performance of requested services, legitimate and lawful uses, compliance with law, or protection against fraud and security threats.
5Location data and SIM consent
Location data is sensitive in practice and must be handled responsibly. Vehicle information is processed only when an authorised user submits a vehicle number and requests a search or refresh. SIM location is requested only through the supported provider workflow and remains restricted until the relevant consent status permits tracking.
The subscriber or relevant person may receive a consent request through an external provider. Consent may be pending, approved, rejected, expired or withdrawn. When consent is not valid, location access may remain locked. Users must remove a SIM or vehicle when their authority ends and must not use tracking data for covert surveillance or harm.
6When we share data
We may share only the data reasonably necessary with:
- telecommunications, consent, FASTag and toll-data providers;
- mapping and address-lookup providers;
- payment gateways, banks or payment-verification partners;
- hosting, infrastructure, security and technical support providers;
- professional advisers, auditors or insurers under confidentiality obligations;
- government authorities, regulators, courts or law enforcement when legally required;
- a successor in a lawful merger, restructuring or transfer, subject to appropriate protection.
We do not sell personal data. We do not authorise service providers to use personal data for their unrelated advertising or independent commercial purposes.
7Payments
Automatic payment details are handled by the selected payment gateway. SIMSIM generally receives transaction references, status, amount and account-credit information rather than full card credentials. Manual payment proof is accessible only to authorised personnel for review, fraud prevention, accounting and dispute handling.
8Data retention and deletion
We retain data only for as long as reasonably required for the purposes described in this policy, including active service delivery, location history requested by the user, consent records, payment and accounting obligations, security, fraud prevention, complaints and legal claims.
Deleting a vehicle or SIM through the platform is intended to remove its locally stored tracking record and associated history, subject to backup cycles, legal holds and records that must be retained by law. Account closure requests are assessed against outstanding transactions, disputes and mandatory retention requirements. Data no longer required is deleted or anonymised using reasonable procedures.
9Security
We use reasonable administrative, technical and organisational safeguards, which may include access controls, hashed authentication credentials, encryption for stored provider secrets, session protection, audit logging, rate controls and restricted administrative access. No internet or storage system is completely secure, so we cannot guarantee absolute security.
You are responsible for protecting your PIN and device. Contact us promptly if you suspect unauthorised access or disclosure.
10International processing
Some service providers may process or route data outside your state or country where legally permitted. Where cross-border processing occurs, we take reasonable steps to use providers and safeguards consistent with applicable legal requirements and contractual obligations.
11Your choices and rights
Subject to applicable law and verification of your request, you may ask us to:
- provide information about personal data processed about you;
- correct inaccurate or incomplete account information;
- delete personal data that is no longer required or legally retained;
- withdraw consent where processing depends on consent;
- close your account or stop future tracking;
- address a privacy grievance or nominate another person where the law provides.
Withdrawal does not affect processing already performed lawfully and may prevent SIMSIM from providing the related tracking function. We may request information necessary to verify identity and protect other users before acting on a request.
12Children
SIMSIM accounts are intended for persons aged 18 or older. We do not knowingly permit a child to create an account or independently consent to location tracking. If you believe a child's personal data has been submitted improperly, contact us so we can investigate and take appropriate action.
13Policy changes
We may update this policy when services, providers, practices or legal requirements change. The current effective date and version will be shown at the top. We will provide additional notice of material changes where required.
14Privacy contact and grievances
To exercise a privacy right, report a concern, withdraw consent, or ask a question, contact SIMSIM Global Commerce. Please include enough detail to identify the relevant account or tracking record without sending unnecessary sensitive data.
