Privacy

What we collect

• Your email address. Required — it is where the QR code is sent and how you recover your order.
• Your phone number. Optional. Used only if we need to reach you about an order.
• Order details. Which plan, which destination, the amount, and the identifiers of the eSIM issued to you (ICCID and activation details).
• Technical data. IP address and request timing, kept transiently to rate-limit abuse of our API.

What we never see

• Your card or UPI details. Payment happens inside Razorpay's own window. Card numbers, CVVs and UPI PINs never reach our servers.
• Your browsing, messages or location. We resell network capacity; we do not operate the network and have no visibility of what you do on it.
• Identity documents. No KYC is required to buy a data-only travel eSIM from us.

Why we hold it

To issue and deliver your eSIM, to let you retrieve your order later, to support you if something goes wrong, and to meet tax and accounting obligations. We do not use your data for advertising and do not sell or rent it.

Who else processes it

• Razorpay — payment processing. They receive your email and the amount, and handle payment details directly.
• Our eSIM supplier — receives the order needed to issue a profile. They do not receive your email address.
• Our email provider — receives your address and the message containing your QR code.

These providers may process data outside India. Where they do, we rely on their contractual safeguards.

How long we keep it

• Order and eSIM records: 8 years, as required for tax records in India.
• Rate-limiting data: minutes, in memory only.
• Support emails: 2 years from the last message.

Your rights

Under India's Digital Personal Data Protection Act 2023 you may ask for a copy of your data, ask us to correct it, or ask us to erase it. Email support@tripkite.com and we will respond within 30 days.

Erasure has one limit worth stating plainly: we must retain order and invoice records for the tax period above. We can delete everything else, including your email address, once an order is complete.

Cookies

We set no advertising or analytics cookies. The site works without any. Razorpay sets its own cookies inside its payment window, governed by their policy.

Security

Traffic is encrypted in transit. Order pages require the secret link from your email or the email address on the order — knowing an order reference alone is not enough to view an eSIM.

If you believe your data has been exposed, contact support@tripkite.com. We will investigate and notify affected users and the Data Protection Board where the law requires it.