AeroCell Legal

    Privacy Policy

    Effective date: October 11, 2026

    This page explains what personal information AeroCell collects, why we use it, how it is shared, and what choices are available to you across the AeroCell website, mobile app, checkout flows, customer dashboard, and support tools.

    Contact: [email protected]

    1. Scope

    This Privacy Policy explains how AeroCell collects, uses, stores, and shares personal information when you use the AeroCell website, mobile app, customer dashboard, hosted checkout flow, install pages, wallet features, alerts, and live support services.

    It applies to information you provide directly and information created when you browse plans, create an account, complete purchases, install or activate an eSIM, top up a plan, contact support, or manage your account.

    2. Information We Collect

    • Account information, including your name, email address, password for email/password accounts, phone number, avatar URL, and Google account identity details if you choose Google Sign-In.
    • Billing and payment information, including billing name, billing email, billing address, order totals, payment status, and wallet transaction records. Payment card processing is handled through Stripe and similar payment tooling rather than stored directly in this website codebase.
    • Order and eSIM information, including package code, plan name, country or destination, order number, install status, activation timestamps, ICCID, QR code, LPA code, SM-DP+ address, activation code, provider lifecycle status, usage volumes, expiry data, and top-up eligibility or history.
    • Support and communications information, including live support messages, image attachments you choose to upload, linked order or profile context, customer alerts, purchase emails, install-detail emails, and inbound support email content processed by our communications systems.
    • Login and security metadata, including login timestamp, IP address, approximate country when provided by trusted infrastructure headers, web/iOS/Android platform, and browser or app user agent.
    • Technical and local storage information, including authentication tokens and session data stored in browser local storage on the website and comparable local storage used in the mobile app to keep your session and eSIM state available between uses.

    3. How We Collect Information

    • Directly from you when you register, sign in, edit your profile, submit billing details, make a purchase, top up, contact support, or delete your account.
    • From integrated providers when you authenticate with Google, complete a payment through Stripe, receive emails, or when eSIM fulfillment partners return installation, lifecycle, or usage updates.
    • Automatically from your use of the service, including order state changes, dashboard activity, support thread activity, and account session state.

    4. How We Use Information

    • To create and manage your account and authenticate you across our services.
    • To process purchases, wallet deposits, top-ups, refunds, billing records, and account-related requests.
    • To provision eSIMs, deliver install details, support activation, and synchronize lifecycle or usage data from fulfillment providers.
    • To provide customer support, including relaying support messages and image attachments to support operations.
    • To send transactional communications such as welcome emails, purchase confirmations, install instructions, receipts, and service alerts.
    • To maintain security, prevent abuse, investigate fraud, troubleshoot failures, review account access metadata, enforce rate limits, and comply with legal obligations.

    5. App Permissions and Browser Storage

    • The website stores session tokens in browser local storage so you can remain signed in between visits.
    • The mobile app stores account details, billing details, notifications, onboarding state, and local eSIM profile state on the device so the app can function smoothly offline and between sessions.
    • The mobile app may request photo library access when you choose to save install assets or attach a gallery image to live support.

    6. Sharing of Information

    Based on the current implementation, AeroCell is not built as an advertising network, does not use your account data for third-party ad targeting, does not track you across apps or websites owned by other companies, and does not share your data with data brokers.

    • Payment processors such as Stripe to complete checkout and wallet funding.
    • Authentication providers such as Google when you choose Google Sign-In.
    • eSIM fulfillment and connectivity providers so your purchased plan can be provisioned, installed, activated, synchronized, or topped up.
    • Communications providers such as Resend to send service emails and process relevant inbound support email data.
    • Support workflow tools, including Telegram-based support routing, when live support messages or image attachments are forwarded to support agents.
    • Authorities, courts, regulators, professional advisers, or counterparties where disclosure is required by law or reasonably necessary to protect rights, investigate misuse, or defend claims.

    7. Legal Bases

    Where applicable law requires a legal basis, we generally process personal information to perform our contract with you, comply with legal obligations, pursue legitimate interests such as security and support operations, or rely on your consent where consent is required.

    8. Data Retention

    • We retain account, billing, order, and usage records for as long as needed to operate the service, provide support, maintain business records, resolve disputes, prevent fraud, and satisfy legal, tax, accounting, or compliance obligations.
    • Support messages and attachments may be retained while a thread is active and for a reasonable period afterward for continuity, audit, and dispute handling.
    • Lifecycle, alert, webhook, and fulfillment records may be retained to support troubleshooting, provisioning history, and service security.
    • Where you use an in-product account deletion flow, the current backend implementation removes your user record and related orders, wallet transactions, and alerts, subject to any legal or operational retention requirements that may apply outside the immediate product workflow.

    9. International Transfers

    AeroCell and its vendors may process information in multiple countries. Your information may therefore be transferred to or accessed from jurisdictions outside the country where you live, including wherever our infrastructure, payment, communication, support, or fulfillment providers operate.

    10. Security

    • We use access controls, authenticated APIs, password hashing for email/password accounts, rate limiting on sensitive routes, and provider-side authentication controls where supported.
    • No system can guarantee absolute security. You should also protect your own credentials and avoid sharing activation codes, QR codes, or other install assets except where necessary for installation.

    11. Your Choices and Rights

    • You can update profile and billing information through available account settings.
    • Email/password users can change their password through supported account management flows.
    • The mobile app includes an account deletion flow for supported account types.
    • Eligible non-active eSIMs can be archived or removed from your customer view through in-product controls.
    • Depending on where you live, you may also have legal rights to request access, correction, deletion, restriction, portability, or objection. You can contact us using the details below.

    12. Children's Privacy

    AeroCell is not intended for children who are not legally able to enter into the relevant service arrangements in their jurisdiction. If you believe a child has submitted personal information to us inappropriately, contact us so we can review the request.

    13. AeroCell in ChatGPT and MCP clients

    When you use the AeroCell plugin through ChatGPT or another MCP client, AeroCell processes the destination, travel dates, and plan filters sent to its MCP service in memory to return matching eSIM plans. The MCP application does not keep a search history or log successful searches or IP addresses. Its hosting provider and CDN do not retain logs.

    The plugin provides plan information and links to AeroCell checkout. Purchases and payments take place on aerocell.app and are covered by the account, order, and payment sections of this Privacy Policy. Your use of ChatGPT or another MCP client is also subject to that provider’s privacy policy.

    14. Changes to This Policy

    We may update this Privacy Policy to reflect changes in the service, vendors, or legal requirements. When we do, we will update the effective date above and may provide additional notice where required.

    15. Contact Us

    For privacy questions or data rights requests, contact AeroCell at [email protected].