Who else sees it
Four parties, and no others. Each gets only the field it needs to
do its job.
The mobile operator receives the number and the amount. Our payment
processor receives the card, never us. Our hosting and email
providers process data on our written instructions. A regulator or
court may compel a record. That is the whole list.
Data may be processed outside your country, because operators sit
in 80+ of them. Transfers use standard contract clauses approved
under the GDPR.
How long we keep each thing
- Payment and top-up records
- 7 years Tax and anti-money-laundering law sets this one, not us.
- Support messages
- 24 months So we can pick up an old thread if the same issue returns.
- Security and fraud logs
- 12 months Then they are deleted on a rolling schedule.
- Your account profile
- On request Close the account and the profile goes with it.