This policy explains what data Portal Verse Resources collects when you use our website, mobile app, and API, why we collect it, what we do with it, and the choices and rights you have. If anything below is unclear, email us — we'll do our best to clarify in plain language.
1. Overview
Portal Verse Resources (referred to as "we", "us", or "our") operates a platform that provides eSIM data plans, airtime, utility bill payments, gift cards, and a digital wallet. We are committed to handling your personal data lawfully, fairly, transparently, and with the minimum collection necessary to deliver our services.
This Privacy Policy applies to all visitors and customers of our website (portalverse.io), our mobile applications on iOS and Android, and any related APIs or services we operate.
2. Data we collect
We collect only the data we need to deliver the service you asked for. Specifically:
- Account data. Email address, password (hashed), display name, and account preferences you choose.
- Payment data. When you top up your wallet we record the amount, currency, and payment method. We do not store full card numbers — that information is held by our PCI-DSS certified payment processors.
- Transaction data. Records of services you order (numbers rented, eSIM plans purchased, airtime, bills, gift cards, etc.) and the wallet movements that result.
- Communication data. The contents of support tickets, chat messages, and any feature requests or bug reports you send us.
- Device & technical data. IP address (truncated after 30 days), device type, OS version, app version, and crash logs — collected purely to keep the service stable and secure.
What we never collect: contacts, your phone book, your location in the background, your browsing habits on other sites, or anything for advertising profiling.
3. How we use your data
We use your data only for the following purposes:
- To create and manage your account.
- To process your orders and credit your wallet correctly.
- To deliver eSIM activations, airtime, bills and gift cards you purchased.
- To send you transactional notifications (receipts, order updates, security alerts).
- To detect, prevent, and investigate fraud or abuse of our service.
- To comply with our legal obligations (e.g. financial record-keeping for tax purposes).
- To improve the product based on aggregated, anonymized usage signals — never on personally identifiable behavior.
4. Legal basis for processing
Under data-protection regulations (including the GDPR), we process your personal data based on:
- Contract. Most processing is necessary to deliver the service you asked for.
- Legitimate interest. Fraud prevention, service stability, and security monitoring.
- Consent. Optional marketing emails — you can unsubscribe at any time with one click.
- Legal obligation. Tax records, anti-money-laundering checks where they apply, and responses to lawful court orders.
5. When we share data
We do not sell, rent, or trade your personal data. We share specific information only with:
- Payment processors (Stripe, PayPal, mobile money operators) to settle your top-ups and refunds.
- Connectivity & carrier partners who deliver the numbers, eSIM data, and airtime you order.
- Infrastructure providers (cloud hosting, error monitoring) bound by strict data-processing agreements.
- Authorities when we are legally compelled by a valid court order — and we push back on overbroad requests.
6. Data retention
We keep personal data only as long as we need it. Truncated IP logs within 30 days; account and transaction records for as long as your account is active plus the period tax and anti-money-laundering laws require. When you ask us to delete your account, we will honor it within 14 days, except for records we are legally required to keep.
7. Security measures
Security isn't a checkbox for us — it's a daily practice. We use:
- TLS 1.3 for all data in transit.
- AES-256 encryption for sensitive data at rest.
- Salted, slow-hashed (PBKDF2) password storage. We never see your password in plaintext.
- Mandatory 2-factor authentication for our admin team and engineering staff.
- Hardware-backed key storage for mobile app secrets (iOS Keychain, Android Keystore).
- Continuous monitoring with 24/7 on-call rotation for security incidents.
- Quarterly third-party penetration tests and bug-bounty rewards for responsible disclosure.
8. Your rights
Depending on your jurisdiction, you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectify — ask us to correct inaccurate or incomplete data.
- Erase — request deletion of your account and personal data, subject to legal retention requirements.
- Restrict — ask us to limit how we process your data while a question is being resolved.
- Object — opt out of any processing based on legitimate interest.
- Portability — receive an export of your data in a machine-readable format.
- Withdraw consent — for anything you originally consented to (such as marketing emails).
- Lodge a complaint with the data-protection authority in your country.
To exercise any of these rights, email [email protected]. We will respond within 30 days.
9. Cookies & tracking
We use a minimal set of strictly necessary cookies to keep you logged in and protect against cross-site request forgery. We do not use advertising cookies, cross-site tracking pixels, or behavioral profiling cookies. Aggregated, privacy-respecting analytics help us understand which pages are useful — they cannot identify you personally.
10. Children's privacy
Portal Verse Resources is not directed at children under 16. We do not knowingly collect personal data from anyone under that age. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
11. International transfers
Portal Verse Resources operates globally. Your data may be processed in countries other than your own, including the United States and the European Union. When data leaves your jurisdiction, we rely on Standard Contractual Clauses or equivalent legal mechanisms, and we ensure the receiving party offers an adequate level of protection.
12. Changes to this policy
We may update this policy when we ship new products or when laws change. When we make material changes we'll notify you in-app and by email, and we'll always update the "Last updated" date at the top of this page. Continued use of the service after an update means you accept the revised policy.
13. Contact us
Privacy questions, requests to exercise your rights, or anything else related to your data:
See also our Terms of Service and About page for context on how Portal Verse Resources operates.