Terasim

Privacy Policy

This policy explains what personal data Terasim uses, why, who receives it, how long we keep it and how you can control it. It starts with the short version and the part specific to Terasim, followed by the rules that apply to all our apps and the information required in particular countries.

Last updated: November 5, 2026

The short version

ODBS LLC is responsible for your personal data in Terasim. You can reach us at info@odbs.tech.
Terasim keeps your account, your orders and the identifiers, status and data usage of your eSIMs. We do not see the websites you visit, the apps you use or the content of your traffic.
Card payments go directly to our payment provider; we never receive or store your full card number.
Terasim does not ask for your phone’s location or for identity documents.
Order and tax records are kept for 10 years because tax law requires it; after you delete your account they are kept without your name or email.
We use your data to provide Terasim and the features you choose, to keep it secure and working, and to meet our legal obligations.
We do not sell your personal data, do not use it for targeted advertising and do not share it with data brokers.
You can access, correct, export and delete your data and withdraw your consent. See section 8 for how.

This summary helps you find your way; the full policy below is what applies.

1. Who we are

Terasim is made by ODBS LLC (“ODBS”, “we”, “us”), a limited liability company organised in Wyoming, United States, at 30 N Gould St, Ste N, Sheridan, WY 82801, United States. ODBS LLC is the controller responsible for the processing described in this policy, unless this policy says otherwise.

This policy covers the Terasim app, its online services, its website and our support. It does not cover services run by others that you use with Terasim, such as app stores, sign-in providers or payment providers; their own privacy policies apply to them.

For any question about privacy or to exercise your rights, write to info@odbs.tech. Please include “Terasim” in your message.

Read the terms of use

2. How Terasim uses your data

Browsing and your account

You can look at destinations and plans without an account. When you first open the app, it creates a guest session with random identifiers so that it can talk to our servers; a guest has no name or email address.

To buy a plan you sign in with Apple, with Google or with a 6-digit code we send to your email address. We then store your email address, your name if your sign-in provider shares it or you enter it, the identifier Apple or Google gives us for your account, your language and when you last signed in. With Sign in with Apple you can hide your email address; Apple then gives us a private relay address. Email codes are stored only as a one-way hash and stop working after 10 minutes.

If you sign in with Apple, we also keep an encrypted token from Apple, so that we can revoke your Sign in with Apple connection when you delete your account.

Orders and payments

For each order we keep the plan and the destination you chose, the price, the tax and the currency, the billing country you give and the country of your IP address (two pieces of evidence that tax law asks us to keep), the order and payment status, your receipt and any refund or withdrawal request. For customers in the EU and the UK we also keep your request to deliver the eSIM at once, with the version of the text you accepted and when.

Payments by card or Apple Pay are processed by our payment provider. Your card details go directly to it; we never receive or store your full card number. The provider tells us the result of the payment and limited details such as the card brand, the last four digits, the card’s country and the outcome of its fraud checks. If you choose to save a card for later purchases, the payment provider keeps it.

If an order uses Terasim credit, we record how much credit it used and how much your card paid.

Your eSIMs

To deliver and support your eSIM we keep its identifiers, such as the ICCID (the number that identifies an eSIM), its installation details (the activation code is stored encrypted), its status (for example ready, installed or active), its validity dates and the data used and left, as reported by the network supplier.

We do not see the websites you visit, the apps you use or the content of your traffic. Your data traffic is carried by the mobile networks at your destination, which handle it under their own rules and the law of their country.

Our eSIM suppliers receive no name, email address or payment details from us. They and the mobile networks know the eSIM itself, its status and the data it uses.

Connection checks and support

If you run the connection check, the app looks on your phone at whether it supports eSIM plans, which mobile network technology is in use, whether a mobile data connection is available and whether a test request to our server gets through over mobile data, and records the answers you give about your settings. It sends these results to our server, which adds the eSIM’s status from the network supplier and returns a result. We keep the results with your eSIM so that our support team and the refund rules can use them.

When you write to us in Help or by email, we keep your messages, the order or eSIM they are about and technical details that help us solve the problem, such as the app version, the phone model and the iOS version.

Location

Terasim does not ask for your phone’s location. We use the country of your IP address and the billing country you give to calculate taxes, to keep the evidence tax law requires and to prevent fraud. The destination you choose tells us where you plan to use the eSIM.

Notifications and emails

If you allow notifications, the app registers your device’s push token with our server. We use it to tell you when your eSIM is ready, when 80% and 95% of your data has been used, 24 hours before a plan expires and when a delivered eSIM has not been installed yet. You can turn notifications off in your phone’s settings; signing out or deleting your account removes the token.

We send the emails that belong to the service: sign-in codes, receipts with the install details (QR code and manual codes), refund updates, replies from support and, when you ask for it, your data export.

Security and fraud prevention

To protect your account and prevent fraud, the app uses Apple App Attest, which confirms that requests come from the genuine Terasim app on a genuine device, and our servers limit how often requests can be made. Our servers use your IP address while handling a request and may record it in security logs that are kept for a limited time.

Before an eSIM is delivered, automated checks look at the order, for example how many orders an account, a card or a device placed in a short time, the spending of a new account and the payment provider’s fraud assessment. An order can then be held for review by a person, need additional card authentication or be declined. If you think an order was declined wrongly, write to us and a person will review it.

For these checks we keep a record of each checkout attempt with its signals: the email domain, the IP address and its country, the billing and card countries, the app installation identifier, the age of the account, the amount, the payment provider’s risk level and an identifier the payment provider gives the card, which recognises the same card without revealing its number. We may block an account, a card, a device, an IP address or an email address that was used for fraud.

Credit and referrals

We keep your Terasim credit balance and every movement of it, your referral code, the code you entered, if any, and whom you invited and whether the reward was given. To prevent abuse of referrals, we compare the app installation, the card, the email domain and the network of both accounts when a reward is due.

Card disputes

If you dispute a payment with your bank, we send the payment provider the evidence it asks for: the description of the plan, your receipt email address, the IP address used for the purchase, the eSIM’s ICCID, the dates of delivery, installation and first use, the data used, the device, our refund policy and, for customers in the EU and the UK, your request to deliver the eSIM at once.

Crash reports

The app and our servers send crash and error reports to a crash reporting provider, in its EU region, so that we can fix problems. Reports contain technical information and a pseudonymous account identifier, but no card details, email addresses or eSIM installation codes.

No ads or tracking

We do not sell your personal data and do not share it for advertising. The app shows no ads and does not track you across other companies’ apps or websites.

Service providers and where data is processed

We use these kinds of providers, each only for the purpose stated and under contracts that limit how they may use your data:

Payment provider: card and Apple Pay payments, cards you choose to save, tax calculation, fraud screening and card disputes.
eSIM suppliers and the mobile networks they work with: issuing your eSIM, carrying your data and reporting the eSIM’s status and usage.
Cloud hosting provider: our servers, database and encrypted backups in Frankfurt, Germany (EU).
Content delivery and network security provider: protection for our servers and delivery of this website.
Email delivery provider: sign-in codes, receipts, refund updates and data exports.
Email provider: the mailbox for messages you send to info@odbs.tech.
Apple: Sign in with Apple, Apple Pay, App Attest and push notifications.
Google: Google sign-in, if you choose it.
Crash reporting provider (EU region): crash and error reports.

Some of these providers process data outside the European Economic Area, the United Kingdom or Türkiye, for example in the United States.

How long we keep data

Account data: until you delete your account.
Email sign-in codes: 10 minutes, stored only as a one-way hash.
Orders, payments, refunds and tax evidence: 10 years from the purchase, because tax law requires it. After you delete your account they are kept without your name or email; a keyed one-way fingerprint of your email address stays with them so that the records can still be matched for tax and fraud prevention.
eSIM identifiers, status and usage: together with the order they belong to.
Connection-check results: together with the eSIM they belong to.
Fraud-check records, credit and referral records and card dispute records: together with the order records they belong to.
Support conversations in the app: until you delete your account, when their content is removed. Emails to our support address: as long as needed to handle your request and any follow-up.
Push tokens: until you sign out, delete your account or the token stops working.
Data exports: sent to your email address and not stored on our servers.
Security logs and crash reports: for a limited time, after which they are deleted automatically.
Database backups: up to 30 days, after which deleted data is gone from them as well.

Your choices in Terasim

In the app you can export a copy of your data (Account › Export my data), which we send to your email address, and delete your account (Account › Delete account). The export does not include the signals of our fraud checks; write to info@odbs.tech if you want those as well.

Deleting your account removes your personal data: your email address, name, sign-in identities, sessions, push tokens, the content of your support conversations and any card saved with our payment provider. Order and tax records we must keep by law stay without your name or email. Installed eSIMs stay on your phone and keep working until they expire, but you will no longer see them in the app or get help with them there.

You can turn notifications off in your phone’s settings, choose at checkout whether to save a card and whether to use your credit, and sign out at any time.

Legal bases for Terasim

Your account, orders, delivery, support, refunds, credit and referrals: contract.
Order and tax records, including the billing and IP country: legal obligation.
Fraud checks, App Attest, security logs, referral abuse checks, crash reports and the evidence we send in a card dispute: our legitimate interests in preventing fraud, keeping the service secure and fixing errors.
Notifications: your consent, which you can withdraw in your phone’s settings.

3. Our legal bases

Where the law requires a legal basis for processing personal data, such as the EU and UK General Data Protection Regulation (GDPR), Türkiye’s Personal Data Protection Law (KVKK) or Brazil’s LGPD, we rely on the following bases, as described for each use in the part of this policy specific to Terasim:

Contract: to provide Terasim, your account and the features and purchases you ask for.
Consent: where we ask for it, for example for optional analytics or for sending content to a third-party AI service. You can withdraw your consent at any time in the app or by writing to us; this does not affect processing that took place before.
Legitimate interests: to keep the service secure, prevent fraud and abuse, fix errors and answer your requests, where these interests are not overridden by your rights. You can object to this processing.
Legal obligation: to keep records required by law, such as tax and purchase records, and to answer lawful requests from authorities.

Some data is needed to provide Terasim; without it, the app or a feature cannot work. Where data is optional, the app tells you or lets you choose.

5. International transfers

ODBS is based in the United States, and our service providers process data in the countries stated for Terasim. When personal data is transferred from one country to another, we use the safeguards the law requires, such as adequacy decisions, the EU-US Data Privacy Framework where a provider is certified, the European Commission’s standard contractual clauses and their UK and Swiss equivalents, and the mechanisms provided by other laws, such as the KVKK and the LGPD.

You can ask us for more information about the safeguards for a particular transfer by writing to info@odbs.tech.

6. How long we keep data

We keep personal data only for as long as it is needed for the purposes described in this policy. The part specific to Terasim lists the main periods. In general:

Your account and your content are kept until you delete them or your account, unless a shorter period is stated.
When you delete your account, we delete its data or remove everything in it that identifies you, except for data we must keep to meet legal obligations, to resolve disputes or to protect against fraud and abuse, which we keep only as long as needed for that purpose.
Backups are overwritten on their normal schedule, and deleted data disappears from them when that cycle ends.
Purchase and tax records are kept for the period the law requires.
Data that no longer identifies anyone may be kept for statistics.

7. How we protect data

We use technical and organisational measures appropriate to the risk to protect personal data, such as encryption in transit, encrypted storage where our providers offer it, access controls, limiting access to people and providers who need it, and monitoring for misuse. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

If a personal data breach occurs that is likely to put your rights at risk, we will notify you and the authorities as the law requires.

8. Your rights and choices

Depending on where you live, you have some or all of the following rights. We respect them for everyone where we reasonably can:

to know whether we process your personal data and to get a copy of it;
to have inaccurate data corrected and incomplete data completed;
to have your data deleted;
to receive the data you gave us in a portable format and to have it transmitted to another provider where technically feasible;
to restrict or object to processing, including processing based on our legitimate interests and direct marketing;
to withdraw your consent at any time, without affecting processing that took place before;
not to be subject to a decision based solely on automated processing that has legal or similarly significant effects on you;
to appeal our answer to your request, where your law provides for it, and to complain to a data protection authority.

Many of these choices are available directly in the app, as described for Terasim, such as exporting or deleting your data and turning optional features off. You can also write to info@odbs.tech from the e-mail address you use with Terasim, or tell us how to identify your account. We may need to verify your identity before we act, answer within the time the law sets (usually one month, or 30 days in Türkiye, extendable where the law allows) and do not charge a fee unless a request is manifestly unfounded or excessive. You may use an authorised agent where your law allows it; we may ask for proof of the authorisation. We will not treat you differently for exercising your rights.

9. Children

Terasim is for people aged 18 or older and is not directed to children. We do not knowingly collect personal data from anyone under 18. If you believe that a minor has given us personal data, write to info@odbs.tech and we will delete it.

10. This website

This website has no user accounts. It stores one cookie, NEXT_LOCALE, to remember the language you choose; it is necessary for the site to work as you asked and contains no identifier.

The site is delivered and protected by a content delivery and security provider, which processes technical request data, such as your IP address and browser information, to deliver the site and to protect it from attacks.

We may use a privacy-friendly web analytics service, which counts visits without cookies, without fingerprinting and without tracking you across sites, to understand how the website is used.

We do not use advertising or tracking cookies on this website.

Links to send us an e-mail open your own e-mail app; nothing is sent until you send it.

Because we do not track you across websites, the website and the app do not change their behaviour in response to browser Do Not Track signals; where the law requires it, we honour Global Privacy Control signals as a request not to sell or share personal data, which we do not do in any case.

11. Changes to this policy

We update this policy when Terasim, our providers or the law change. The date at the top shows the latest version, and we keep earlier versions available on request. If a change materially affects how we use your data, we will tell you in advance, for example in the app or by e-mail, and where the law requires it we will ask for your consent again.

12. Additional information for the European Economic Area, the United Kingdom and Switzerland

ODBS LLC is the controller. Our legal bases for each use are described in section 3 and in the part specific to Terasim. You have the rights under the GDPR, the UK GDPR and the Swiss Federal Act on Data Protection described in section 8.

You can lodge a complaint with the data protection authority of the country where you live or work or where an alleged infringement took place, for example the Information Commissioner’s Office in the United Kingdom or the Federal Data Protection and Information Commissioner in Switzerland. We would appreciate the chance to address your concern first at info@odbs.tech.

13. Additional information for the United States

Depending on the state where you live, such as California, Colorado, Connecticut, Virginia or Texas, you may have the rights described in section 8, including the rights to know, access, correct, delete and port your personal data, to opt out of its sale, of targeted advertising and of profiling, and to limit the use of sensitive personal data. To exercise them, write to info@odbs.tech. If we decline your request, you can appeal by replying to our answer with the subject “Appeal”; if your appeal is denied, you can contact your state attorney general.

We do not sell personal data or share it for cross-context behavioural advertising, and we have not done so in the past 12 months. We do not use sensitive personal data, such as health information, for purposes other than providing the service you asked for and the other purposes the law permits. We do not use personal data to train large language models.

Categories of personal data we collect, their sources, purposes, the categories of recipients and retention periods are described in the part specific to Terasim and in section 4 and section 6. California residents may also ask which personal information, if any, we disclosed to third parties for their direct marketing purposes; we do not make such disclosures.

14. Information notice for Türkiye (KVKK)

This section is our information notice under Article 10 of Türkiye’s Personal Data Protection Law No. 6698 (KVKK). The data controller is ODBS LLC. The personal data processed, the purposes and the legal reasons are described in the part specific to Terasim and in section 3; we collect personal data electronically through the app, its server, the website and our support, on the legal grounds in Articles 5 and 6 of the KVKK, such as the performance of a contract, our legitimate interests, legal obligations and, where required, your explicit consent.

Personal data is transferred to our service providers and, where necessary, to authorities, for the purposes described in this policy, including to service providers abroad on the grounds and with the safeguards provided in Article 9 of the KVKK.

Under Article 11 of the KVKK, you have the right to learn whether your personal data is processed, to request information about it, to learn the purpose of the processing and whether it is used accordingly, to know the third parties in Türkiye or abroad to whom it is transferred, to request its correction or deletion and the notification of these actions to those third parties, to object to a result against you arising from its analysis exclusively by automated systems, and to claim compensation for damage arising from unlawful processing. You can send your request to info@odbs.tech from the e-mail address registered with us, or in the other ways set out in the Communiqué on the Principles and Procedures for Requests to the Data Controller. We answer without charge within 30 days at the latest. You may also complain to the Personal Data Protection Board.

15. Additional information for Brazil (LGPD)

If you are in Brazil, you have the rights in Article 18 of the General Personal Data Protection Law (LGPD), including confirmation of processing, access, correction, making unnecessary or excessive data unidentifiable, blocking it or deleting it, portability, information about the public and private entities with which we share data, information about the possibility of refusing consent and its consequences, and withdrawal of consent. To exercise them or for any question about the processing of your data, write to info@odbs.tech. You may also petition the National Data Protection Authority (ANPD).

16. Additional information for other countries

Canada, including Québec: you have rights of access and correction and, in Québec, rights relating to portability and to automated decisions. Questions and requests about privacy can be sent to info@odbs.tech, and you may complain to the Office of the Privacy Commissioner of Canada or, in Québec, to the Commission d’accès à l’information.
Japan: we handle personal information under the Act on the Protection of Personal Information. Our service providers abroad are listed for Terasim; you can ask us at info@odbs.tech about the measures they take and the personal information protection systems of their countries, and request disclosure, correction, suspension of use or deletion.
South Korea: you can request access, correction, deletion or suspension of processing at info@odbs.tech. The personal data transferred abroad, the recipients, their countries, the purposes and the retention periods are described for Terasim; you can refuse such transfers by not using the features that require them or by deleting your account.
India: you can request access, correction, completion, updating and erasure of your personal data, nominate another person to exercise your rights, and raise a grievance with us at info@odbs.tech; if it is not resolved, you may complain to the Data Protection Board of India.
Australia: we handle personal information in line with the Australian Privacy Principles. You may complain to us at info@odbs.tech and, if you are not satisfied with our answer, to the Office of the Australian Information Commissioner.
Everywhere else: you have the rights that the law of your country gives you, and you can exercise them by writing to info@odbs.tech.

17. Contact

ODBS LLC, 30 N Gould St, Ste N, Sheridan, WY 82801, United States. E-mail: info@odbs.tech. Please include “Terasim” in your message.