Privacy policy

Talisim is run by Magnetic Labs Inc ("we"). This page says what we collect when you buy or use a travel eSIM, who handles it for us, how long it is kept, and what you can ask us to do with it. The short version: you don't create an account. Your order and payment are held by Stripe, your eSIM by our supplier, and what ties them to you is your email address. What we keep ourselves is mostly what you write to our support team.

1. Who is responsible

Magnetic Labs Inc, trading as Talisim, is the data controller. 1930 Village Center Circle #3-6537.Las Vegas, NV 89134. Privacy questions go to support@talisim.com.

2. What we collect, and why

• Your email address, to send your order confirmation, the private link to your eSIM, a sign-in link if you ask for one, and notices about the eSIM you bought (running low on data, about to expire). Legal basis: performing the contract.
• Your order: what you bought, when, and the amount, held by Stripe alongside the payment. We don't keep a separate copy. The exception is an eSIM we send you free, as a replacement or goodwill: there's no payment behind it, so we keep its record (your email, the plan and why we sent it) in our own database. Legal basis: performing the contract, and our legal duty to keep payment records.
• Your payment details: your card, the name on it and your billing country or postcode, entered on Stripe's checkout page and held by Stripe. We see the card's brand, last four digits and issuing country, never the full number. Legal basis: performing the contract.
• Fraud checks on every payment. Stripe scores it for risk using the payment details, your IP address and its approximate location, and your device and browser. A payment that looks risky may be held for us to review, and a payment your card's bank reports as fraud is refunded automatically and its eSIMs cancelled or suspended. We also add up what each email address and each card has spent that day, and hold a payment that goes over our daily limit until a person has looked at it. If any of this happened to you in error, contact us and a person will look at it. Legal basis: our legitimate interest in preventing fraud.
• Your eSIM: its identifiers, plan, data usage and expiry, held by our eSIM supplier and read live when you open your order page. Legal basis: performing the contract.
• Your IP address, briefly, to rate-limit sign-in requests, checkout and contact-form messages, and to stop abuse. A contact-form message is kept with the IP address and browser it was sent from, for the same reason. Legal basis: our legitimate interest in keeping the service working and fraud-free.
• What you write to us through the contact form or by email: your name, email, order code and message, kept in our support system with our replies and any notes our team makes, so we can answer you and see the history if you write again. An AI model drafts a suggested reply from your message, your order details and our help articles; a person reads and approves every reply before it is sent, and our team may be notified of your message, and approve replies, through a secure messaging app. Your message isn't used to train any AI model. Legal basis: performing the contract, or our legitimate interest in answering you.
• A sign-in cookie once you sign in, so you stay signed in. It holds a signed token, not your email in the clear. Legal basis: strictly necessary for the service you asked for.
• Marketing and advertising measurement, only after you accept the cookie banner. We note where your first visit came from: the campaign tags on the link you followed, the website that sent you (its name, not the page), the page you arrived on and, if it was a Google ad, the click identifier. If you buy, these are kept with your order at Stripe, so we can see which campaigns bring orders, and a purchase from a Google ad is reported back to Google with the order value. Decline the banner and none of this is stored or sent. Legal basis: your consent, which you can withdraw from the "Cookie settings" link in the footer.

3. Who handles it for us

A few companies process data on our behalf, and none of them may use it for their own purposes, with one exception: Stripe also uses payment data for its own fraud prevention and legal obligations, under its own privacy policy. Stripe takes the payment (we never see your full card number), our eSIM supplier issues the eSIM and holds its usage under an order reference rather than your name, an email provider delivers our emails, a hosting provider runs the site and keeps a 30-day error log, and Google Ads measures advertising only if you accept cookies. Our support system runs on the same hosting provider, including the AI model that drafts replies, and our team is notified of support messages through a secure messaging app and a staff mailbox. We don't sell or share your personal information for advertising, and we don't pass it to anyone else except where the law requires it.

4. Where it goes

We are a United States company and our providers run in the United States and elsewhere. Our eSIM supplier operates internationally, and the mobile networks your eSIM connects to are in the country you travel to. Where data leaves the country you are in, it does so under the providers' standard contractual protections.

5. How long we keep it

• Order and payment records: as long as the law requires us to keep payment records, typically seven years, held by Stripe.
• Records of eSIMs we sent you free: kept like order records.
• eSIM records: for the life of the eSIM and our supplier's retention period after it expires.
• Emails we sent you: kept by our email provider for a short period for delivery and troubleshooting.
• Error log entries: 30 days.
• Support messages (contact form and email): the text of messages and replies for 12 months, then deleted. The record that a conversation happened (your email, name, subject and order code) is kept until you ask us to delete it, so we can see your history if you write again.
• Daily spending totals for fraud limits (by email address and by card): 7 days.
• Sign-in links: 15 minutes. Sign-in cookies: until you sign out or they expire.
• Advertising click identifiers: only with your consent. In your browser until you clear its site data, and, if you bought, with your order at Stripe for as long as the order record is kept. Withdrawing consent stops new ones being recorded but doesn't remove them from an order already placed; ask us and we will.

6. Your rights

Wherever you are, you can ask us what we hold about you, ask us to correct or delete it, or object to how we use it. If you are in the EU, UK or Switzerland you also have the right to restrict processing, to data portability, to complain to your data protection authority, and not to be bound by a fraud decision made only automatically: ask, and a person will review it. If you are in California, you have the right to know, delete and correct, and the right to opt out of "sharing" for advertising; declining the cookie banner does that. We don't discriminate against anyone for exercising a right.

To exercise any of these, email support@talisim.com from the address you ordered with. We answer within 30 days. Because an eSIM's usage record is held by our supplier for the life of the eSIM, deleting it early means cancelling the eSIM.

7. Cookies and similar storage

• Sign-in cookie: strictly necessary, set only when you sign in.
• Cookie choice: your accept or decline, stored in your browser so we don't ask again.
• Cart: what you've added, stored in your browser only.
• Visit source: the campaign tags, referring website and landing page of your first visit, only after you accept.
• Google Ads: conversion cookies and a click identifier, only after you accept.

The bot check on the contact form, run by our hosting provider, may set a short-lived cookie of its own to tell you apart from a bot.

8. What we don't do

• We don't ask you to set a password. You sign in only by requesting a link at the email address you ordered with.
• We don't ask for ID, a passport or a photo.
• We don't send your eSIM's install details by email, only a private link to view them.
• We don't use analytics that follow you across other sites, and we don't run a newsletter.
• We don't knowingly sell to anyone under 16. If you think a child has bought from us, tell us and we'll refund and delete the order.

9. Changes

If this policy changes in a way that matters, we'll say so on this page and update the date at the top. Questions: support@talisim.com.