隱私權政策
最後更新：2026年3月
1. 我們是誰
TripoSIM由BroadNet Technologies LLC經營，總部位於美國新澤西州。本隱私權政策說明當您使用我們的網站（triposim.com）和服務時，我們如何收集、使用、儲存和保護您的個人資訊。
TripoSIM is operated by BroadNet Technologies LLC, a company registered in Dubai, United Arab Emirates ("TripoSIM", "we", "us", or "our"). This Privacy Policy explains in detail what information we collect, why we collect it, how we use and share it, how long we keep it, how we protect it, and the rights and choices you have. It applies to our website (triposim.com), our mobile applications, and all related services (together, the "Services"). By using the Services you agree to the practices described here.
Information We Collect
We collect the following categories of information, and only what we need to provide and improve the Services:
- Account information — your name, email address, and (optionally) phone number, plus a securely hashed password, created when you register.
- Order and transaction information — the eSIM plans you purchase, order history, destination and validity, and the ICCID of the eSIM profile issued to you.
- Payment information — payments are processed by our PCI-DSS-compliant payment processor (Stripe), which receives your card details directly. We never see or store your full card number; we retain only a payment reference, the amount, currency, and status.
- Device and technical information — IP address, browser type, operating system, device model, language, and, for our mobile apps, push-notification tokens and a device identifier used to deliver notifications.
- Usage and analytics information — pages viewed, features used, referring source, and interactions, collected (only with your cookie consent) to understand and improve the Services.
- Location information — collected only with your explicit permission (for optional features such as the WiFi map); if you decline, the Services work normally without it.
- Communications and support — the contents of messages you send us (email, chat, support tickets) so we can respond and keep a record of the request.
How We Use Your Information
We use the information above for the following purposes:
- To provide the Services — create your account, process your order, provision your eSIM, deliver the QR code, and provide customer support.
- To process payments and prevent fraud, and to keep records required for tax, accounting, and legal compliance.
- To operate, secure, and improve the Services, diagnose problems, and develop new features.
- To communicate with you about your orders, account, and service updates, and — only if you opt in — marketing messages you can unsubscribe from at any time.
- To measure our own marketing (for example, website conversions and advertising performance) where you have given cookie consent.
- To comply with legal obligations and enforce our terms.
Legal Bases for Processing
Where the GDPR or similar laws apply, we rely on these legal bases: performance of our contract with you (to deliver the Services you buy); your consent (for optional cookies, location, and marketing, which you can withdraw at any time); our legitimate interests (to secure and improve the Services and prevent fraud, balanced against your rights); and compliance with legal obligations (such as tax and record-keeping).
How We Share Information
We do not sell your personal information. We share it only as needed to run the Services:
- Connectivity partners — to activate your eSIM we share the minimum data required (your plan selection and the eSIM ICCID) with the network partner that fulfils your order.
- Service providers — payment processing, cloud hosting, email and SMS delivery, push notifications, analytics, and security, each acting on our instructions under contract.
- Legal and safety — where required by law, court order, or to protect the rights, safety, and security of our users, the public, or TripoSIM.
- Business transfers — if TripoSIM is involved in a merger, acquisition, or asset sale, information may be transferred, subject to this Policy.
Data Retention
We keep personal information only as long as necessary for the purposes above. Account information is kept while your account is active. Order and payment records are retained for up to 7 years to meet tax and accounting obligations, after which they are deleted or anonymized. Analytics data is retained on a rolling basis. When you delete your account, we remove your personal information as described in the Account Deletion section below, except where longer retention is required by law.
How We Protect Your Data
We use industry-standard safeguards to protect your information, including encryption in transit (HTTPS/TLS), hashed passwords, access controls that limit who can see personal data, network firewalls, and monitoring. No method of transmission or storage is completely secure, but we work continuously to protect your information and to notify you and the authorities of any breach as required by law.
Your Privacy Rights and Choices
Depending on where you live, you may have the right to: access the personal information we hold about you; correct inaccurate information; delete your information; receive a copy in a portable format; object to or restrict certain processing; and withdraw consent at any time (without affecting processing already carried out). You also have the right to lodge a complaint with your local data-protection authority.
To exercise any of these rights, email [email protected] or use Settings → Delete Account in the app or website. We will respond within the time required by applicable law. You can opt out of marketing at any time via the unsubscribe link, and you can manage cookies through our cookie banner.
International Data Transfers
TripoSIM operates globally, and your information may be processed in countries other than your own, including the United Arab Emirates and countries where our service providers operate. Where we transfer personal data across borders, we use appropriate safeguards (such as standard contractual clauses) to ensure it remains protected in line with this Policy.
Cookies and Similar Technologies
We use strictly necessary cookies to run the site (for example, to keep you logged in and secure), and — only after you accept our cookie banner — analytics and advertising cookies to measure and improve the Services. Advertising and analytics storage default to "denied" under Google Consent Mode v2 and are enabled only after you accept. You can change or withdraw your choice at any time, and declining optional cookies does not affect your ability to buy or use an eSIM.
2. 我們收集的資訊
我們收集以下類型的信息：
- 帳戶資訊：建立帳戶時的姓名、電子郵件地址和密碼。
- 付款資訊：由Stripe安全處理。我們不儲存完整卡號 — 僅保留最後四位、卡品牌和有效期限供您參考。
- 使用數據：eSIM數據消耗和狀態，用於顯示您的控制面板和監控服務品質。
- 技術資料：IP位址、瀏覽器類型、設備資訊和存取頁面，用於安全和分析。
- 通訊：您傳送給客服團隊的訊息。
行動應用數據
當您使用 TripoSIM 行動應用程式（Android 或 iOS）時，我們也可能收集以下數據：
- 推播通知令牌（Android 使用 FCM，iOS 使用 APNs）－僅用於發送來電提醒和服務通知。令牌儲存在我們的伺服器上，您退出登入時將被刪除。
- SIP/VoIP 憑證－由伺服器端為 HomeLink 呼叫轉移功能產生。安全儲存在裝置上（Android SharedPreferences，iOS Keychain）及我們的伺服器上。絕不與第三方共享。
- 手機通訊錄（僅限 HomeLink 功能）－如果您啟用 HomeLink 並授予權限，我們會將您的聯絡人姓名和電話號碼（規範化為 E.164 格式）同步到我們的伺服器。這些數據僅用於將來電路由至正確的使用者。聯絡人同步完全可選，可隨時在【設定】中關閉。當您停用該功能或刪除帳戶時，聯絡人將從我們的伺服器上刪除。
- 裝置識別碼－裝置型號、作業系統版本以及製造商指派的裝置 ID，用於推播通知和偵錯。
HomeLink（VoIP 呼叫轉移）
HomeLink 讓您透過資料連線在 TripoSIM 應用程式上接收打到您家用電話號碼的來電。啟動 HomeLink 後：
- 我們為您指派一個虛擬 DID 電話號碼並儲存您的 SIP 註冊憑證。
- 通話詳細記錄（來電號碼、通話時間、時間戳記）將被記錄，用於您的通話記錄和計費目的。
- 語音通話透過加密的 SIP/UDP 協定傳輸。音訊即時處理，不會錄製或儲存。
- 如果您啟用聯絡人同步，主叫姓名將在我們的路由伺服器上本地匹配，以便及時接聽來電。
TripoSIM Shield 與家長監護
Shield 提供 DNS 等級廣告攔截和內容過濾。家長監護在此基礎上增加兒童安全過濾功能（兒童安全模式 / 青少年友善模式）。
- DNS 查詢透過我們的安全 DNS 代理伺服器（shield.triposim.com）路由，該伺服器將請求轉送至上游過濾提供者（CleanBrowsing）。我們不會記錄個人 DNS 查詢或瀏覽記錄。
- 家長監護設定（過濾等級、PIN 雜湊值）儲存在我們的資料庫中，並與您的使用者帳戶關聯。
- PIN 以 bcrypt 哈希形式存儲，不可逆向還原。我們無法恢復您的 PIN。
- 不收集、儲存或與任何第三方分享任何瀏覽活動資料。
位置數據
我們僅在您明確同意的情況下收集位置資料：
- WiFi 地圖功能－如果您授予位置權限並接受 Cookie，我們將使用您的座標顯示附近的 WiFi 熱點。位置資料將發送到我們的伺服器和 Google Places API 用於熱點查詢。
- 基於 IP 的地理定位－只有在您接受 Cookie 同意後，我們可能會使用您的 IP 位址偵測您所在的國家，用於貨幣顯示和緊急號碼查詢。此功能使用 ipapi.co 服務。
- 如果您拒絕 Cookie 或拒絕位置權限，將不會收集任何位置資料。應用程式無需位置存取即可正常運作。
第三方服務
我們使用以下可能處理您資料的第三方服務：
- Stripe（stripe.com）－支付處理。 Stripe 直接接收您的支付卡資訊。我們從不查看或儲存完整的卡號。
- Google Analytics－網站分析，僅在您接受 Cookie 同意後載入。以匿名方式追蹤頁面瀏覽量和使用者行為。
- Firebase Cloud Messaging－為 Android 裝置推播通知。
- Apple Push Notification service（APNs）－為 iOS 裝置推播通知。
- CleanBrowsing－為 Shield 和家長控制提供上游 DNS 過濾。 DNS 查詢被轉發，但不由我們的代理程式記錄。
- Cloudflare Turnstile－登入和註冊時的 CAPTCHA 驗證，防止自動化攻擊。
- eSIM 供應商—我們與履行您 eSIM 訂單的供應商共享您的套餐選擇和 ICCID。供應商選擇透過我們的路由引擎自動完成。
Google API Services & Advertising Data
TripoSIM uses Google advertising and measurement services to run and measure our own marketing. As required by the Google API Services User Data Policy, this section explains how we handle data in connection with Google services and APIs.
- Measurement & advertising tags: With your cookie consent, we load Google’s tag (gtag.js) to measure website conversions and build remarketing audiences. Under Google Consent Mode v2, advertising and analytics storage default to "denied" and are enabled only after you accept cookies. If you decline, no Google advertising or analytics cookies are set.
- Google Ads API (our own account only): We operate an internal, server-side integration that manages TripoSIM’s own Google Ads advertising account using our own authorized credentials. This integration accesses only our own advertising account. It does NOT access, collect, store, or share any personal data from the Google accounts of our website visitors or customers.
- Limited Use: TripoSIM’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not sell Google API data, do not use it for personalized advertising, and do not allow humans to read it except where permitted by that policy or with your explicit consent.
- Data retention: aggregate advertising performance data (such as campaign clicks and conversions for our own account) may be cached on our servers for reporting. It contains no personal data about our visitors.
For questions about our use of Google services, contact [email protected].
3. 我們如何使用您的訊息
- 提供、維護和改進我們的服務
- 處理您的訂單和交付eSIM配置文件
- 發送訂單確認、使用提醒和客服回复
- 檢測和防止詐欺和未授權訪問
- 遵守法律義務
4. 資訊共享
我們不出售您的個人資訊。我們僅與以下方共享數據：
- eSIM供應商：為了配置和管理您的eSIM（僅ICCID和套餐詳情）。
- 付款處理商：Stripe，用於安全處理您的付款。
- 法律機關：法律要求時或為保護我們的權利。
5. 資料安全
我們採用業界標準的安全措施，包括SSL/TLS加密、密碼雜湊（bcrypt）和安全伺服器基礎設施。但沒有任何電子傳輸方法是100%安全的，我們無法保證絕對安全。
6. 資料保留
帳戶資訊在帳戶活躍期間保留。訂單和交易記錄保留最多7年，用於法律和會計目的。您可以隨時要求刪除您的帳戶和個人資料。
7. 您的權利
您有權：
- 存取我們持有的關於您的個人數據
- 請求更正不準確的數據
- 請求刪除您的個人數據
- 撤回行銷通訊的同意
- 請求以可攜式格式取得資料副本
如需行使這些權利，請聯絡 [email protected].
8. GDPR和國際用戶
如果您位於歐洲經濟區（EEA）、英國或其他有資料保護法律的司法管轄區，您根據《一般資料保護規範》（GDPR）或同等法規享有額外權利。這些包括存取權、糾正權、刪除權、限制處理權、資料可攜權和反對權。
如有GDPR相關諮詢或行使您的權利，請聯絡我們的資料保護官 [email protected].
9. Cookie
我們使用必要的Cookie來維護您的登入工作階段和偏好設定。我們可能使用分析Cookie（Google Analytics）來了解訪客如何與我們的網站互動。繼續使用我們的網站即表示您同意使用必要的Cookie。您可以透過瀏覽器控制Cookie設定。如需完整詳情，請查看瀏覽器設定中的Cookie偏好。
帳戶刪除
您可以隨時在 TripoSIM 應用程式或網站的【設定】→【刪除帳號】中刪除您的帳號。刪除帳戶後：
- 您的個人資訊（姓名、電子郵件、電話）將永久刪除。
- 您的 SIP 憑證、推送令牌和聯絡人同步資料將被移除。
- 您的 HomeLink 號碼將被釋放，呼叫轉移將停止。
- 訂單和支付記錄將依法保留 7 年，但將進行匿名化處理。
- 活躍的 eSIM 檔案可能繼續有效至到期，但將與您的帳戶解除關聯。
帳戶刪除不可撤銷。刪除確認前，您將透過電子郵件收到驗證碼。
兒童隱私
TripoSIM 不適用 13 歲以下兒童。我們不會故意收集 13 歲以下兒童的個人資訊。家長監護功能旨在幫助家長管理子女的網路存取－無需兒童建立帳戶或提供個人資訊。如果您認為某位兒童向我們提供了個人數據，請聯絡我們申請刪除。
10. 本政策變更
我們可能不時更新本隱私權政策。我們將透過電子郵件通知註冊用戶重大變更。