1. Who is responsible for your data
Wavee is operated by two companies, and each one is responsible (the "controller") for the data of the sales it processes. For any privacy question or request, write to our data protection officer, Sergio Padilha, at hello@wavee.global.
- 1.1Wavee Global eSIM, LLC (EIN 32-0859013), 131 Continental Dr, Suite 305, Newark, DE 19713, United States — for purchases paid by card or digital wallet from 23 July 2026, for your Wavee account, and for the website and app.
- 1.2S H C Padilha Consultoria em Tecnologia da Informação Ltda (CNPJ 47.476.357/0001-04), Ayrton Greiffo 429, 81230-178, Campo Comprido, Curitiba, Paraná, Brasil — for purchases paid by Pix or PayPal, for card purchases made before 23 July 2026, and for orders invoiced in Brazil.
2. Information we collect
- 2.1Information provided directly: name, email address, phone number, and payment details when you create an account or complete a purchase.
- 2.2Automatically collected information: device data, IP address, geographic location, language, the pages you visit on our site, and interactions such as clicks and scrolling when you allow analytics cookies.
- 2.3Communications: information related to support conversations, surveys, feedback, and requests sent by you.
3. How we use information
- 3.1To process and manage eSIM purchases and activations.
- 3.2To improve app functionality and the user experience.
- 3.3To provide customer support and respond to questions.
- 3.4To send service notices, such as order and service updates or changes to our Terms and Conditions, and, where you have agreed, promotions.
- 3.5To protect account security and help prevent fraud.
5. Data protection
We implement technical and organizational security measures to protect your information against unauthorized access, loss, or theft. These measures include encryption, firewalls, and restricted access controls.
6. Why we are allowed to use your data
- 6.1To perform the contract: process your order and payment, deliver and support your eSIM, and manage your account.
- 6.2To meet legal obligations: keep tax, accounting and payment records, and answer authorities when the law requires.
- 6.3Our legitimate interest: protect your account and our service against fraud and abuse, and fix errors — always weighed against your rights.
- 6.4Your consent: analytics and advertising cookies, and marketing messages. You can withdraw it at any time in Manage cookies or in your account, without affecting what was done before.
7. International transfers
Our companies and service providers are in the United States, Brazil and other countries, so your data may be processed outside the country where you live. When the law requires, we rely on safeguards such as the European Commission's standard contractual clauses or adequacy decisions, and on the equivalent mechanisms of Brazil's LGPD and the UK GDPR. Who receives your data outside your country, and why:
- 7.1Stripe and PayPal (United States): payments.
- 7.2Railway and Cloudflare (United States): our servers and website, where your account and orders are stored.
- 7.3Amazon Web Services (United States): sending our emails.
- 7.4Google, Meta and Microsoft (United States): measurement and ads, only with your cookie consent.
- 7.5Sentry (United States): recording errors on the website.
8. Data retention
Personal data is kept only for as long as necessary to fulfill the purposes described in this policy or as required by law. After that period, the information is deleted or anonymized.
9. Your rights
- 9.1Access, correct, or delete your personal information.
- 9.2Withdraw consent for data usage at any time.
- 9.3Request the transfer of your data to another service provider when applicable.
- 9.4Contact us to clarify any questions about how your data is processed.
- 9.5Object to processing based on our legitimate interest, or ask us to restrict it while a request is being reviewed.
- 9.6Complain to the data protection authority where you live — for example the ANPD in Brazil, the ICO in the United Kingdom, or your country's authority in the European Union.
- 9.7If you live in the United States: we do not sell your data; you can opt out of the use of your data for targeted advertising in Manage cookies, and you will not be treated differently for exercising your rights.
10. Account and data deletion
You can delete your Wavee account at any time, from the website or the app: sign in and go to Account › Privacy › Delete account. You may also email hello@wavee.global to request deletion — we verify your identity before proceeding.
- 10.1Deleted or anonymized: name, email, phone number, language, preferences, sessions, notification tokens and the link between you and the eSIMs you purchased.
- 10.2Retained: tax and payment records, for the period the tax and accounting laws of the country of sale require, without personal identification wherever possible.
- 10.3Active eSIMs are deactivated together with the account and cannot be recovered afterwards — use or transfer your plans before requesting deletion.
- 10.4Requests are completed within 30 days; deletion from the app is usually immediate.
11. Data requests without deleting your account
Not every request requires deleting your account. Under Account › Privacy you can also request, with verification by a code sent to your email:
- 11.1Correction of incorrect or outdated data.
- 11.2Anonymization: keeps the records the law requires and removes the link to you.
- 11.3Withdrawal of consent for uses that depend on it, such as marketing.
- 11.4The list of third parties your data has been shared with.
- 11.5Human review of automated decisions.
13. Changes to this policy
We may update this Privacy Policy to reflect changes in our services or legal requirements. We will notify you of relevant changes through the app or by email.
14. Contact
If you have questions or concerns about this Privacy Policy, about how your data is handled, or if you would like to request deletion of your information, please contact us.