OUDENIC Privacy Policy

Effective Date: May 15, 2026
Last Updated: May 15, 2026


1. Introduction

OUDENIC ("we," "us," "our") provides prepaid eSIM data connectivity services through oudenic.com (the "Platform"). This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our services.

By using the Platform, you consent to the practices described in this policy. If you do not agree, please discontinue use immediately.


2. Information We Collect

2.1 Account Information

When you create an account, we collect:

DataPurpose
Email addressAccount authentication, order confirmations, customer support
PasswordAuthentication (stored in hashed form; we cannot view your password)
Full name (optional)Invoice generation

We do not collect phone numbers, dates of birth, government identification, or social media profiles.

2.2 Transaction Information

When you make a purchase, we process:

DataPurpose
Order details (product, quantity, price)Service delivery
Payment reference identifiersPayment reconciliation
Invoice recordsTax compliance

We never receive or store your credit card number, CVV, or bank account details. All payment processing is handled by PCI-compliant third-party processors.

2.3 Automatically Collected Information

DataPurposeRetention
IP addressFraud prevention, sanctions compliance90 days
Browser informationSecurity monitoring90 days
Country of originRegulatory compliance90 days
Request metadataOperational integrity, abuse detection90 days

Sensitive values (passwords, tokens, API keys) are automatically redacted before storage in our logs.

2.4 Cookies and Session Management

We use strictly necessary cookies only to maintain your authenticated session. These cookies are essential for the Platform to function and cannot be disabled.

We do not use:

  • Advertising or tracking cookies
  • Third-party analytics services
  • Tracking pixels or web beacons
  • Fingerprinting for advertising purposes

2.5 eSIM Provisioning Data

When we provision an eSIM profile, we transmit only technical product identifiers to our supplier. Your personal information (email, name, IP address) is not shared with the eSIM supplier or mobile network operators.


3. How We Use Your Information

We use personal information solely for:

  1. Service Delivery — Processing orders, provisioning eSIM profiles, delivering QR codes
  2. Account Management — Authentication, password resets, session management
  3. Customer Support — Responding to support tickets and resolving billing inquiries
  4. Legal Compliance — Sanctions screening, tax record retention, responding to lawful requests
  5. Security — Fraud detection, abuse prevention, threat mitigation
  6. Communications — Order confirmations, fulfillment notifications, and service announcements

We do not use your information for:

  • Advertising or marketing profiling
  • Sale or rental to third parties
  • Behavioral analytics
  • Automated decision-making with legal effects

4. Information Sharing

4.1 Zero Sale Policy

We do not sell, rent, or trade your personal information to any third party for any purpose.

4.2 Service Providers

We share limited data with the following categories of service providers, solely to operate the Platform:

Provider CategoryPurposeData Shared
Payment processorPayment processingPayment tokens, order amounts
eSIM supplierProfile provisioningProduct identifiers only (no personal data)
Infrastructure providerContent delivery, securityIP addresses (transit only)
Email serviceTransactional email deliveryEmail address, message content

All service providers are bound by data processing agreements and receive only the minimum data necessary for their function.

4.3 Legal Disclosure

We may disclose information if required by valid court orders, subpoenas, or lawful requests from law enforcement or tax authorities. We will notify you of such disclosures unless legally prohibited from doing so.


5. Data Security

We employ industry-standard security measures to protect your personal information, including:

  • Encryption of all data in transit
  • One-way hashing of passwords
  • Cryptographic verification of all external communications
  • Role-based access controls for administrative functions
  • Automated threat detection and abuse prevention

6. Data Retention

We retain personal data for the minimum period necessary to fulfill the purposes described in this policy:

Data CategoryRetention PeriodReason
Account informationUntil deletion requestService operation
Order and invoice records7 years from transaction dateTax compliance
Server logs90 daysSecurity and abuse detection
Support ticketsDuration of account existenceSupport continuity
eSIM fulfillment records7 years from transaction dateTax and dispute compliance

When you request account deletion (see Section 7), we anonymize your personal identifiers while retaining transaction records in anonymized form as required by tax law.


7. Your Rights

7.1 Available Rights

Depending on your jurisdiction, you may exercise the following rights:

RightDescription
AccessObtain a copy of the personal data we hold about you
RectificationCorrect inaccurate personal data
DeletionRequest permanent deletion of your account and personal data
RestrictionRequest that we limit processing of your data
Data PortabilityReceive your data in a structured, machine-readable format
ObjectionObject to processing based on legitimate interest

7.2 How to Exercise Your Rights

All rights requests must be submitted through our support ticket system at oudenic.com/support, using the "Account" category. You must be logged into the account associated with the request.

We will verify your identity before processing any request and respond within 30 days.

7.3 Account Deletion

Upon a verified deletion request:

  1. Your account will be permanently deactivated
  2. Personal identifiers (email, name) will be anonymized
  3. Active eSIM profiles will be revoked
  4. Transaction records will be retained in anonymized form for the legally required retention period

Account deletion is irreversible. Once deleted, you will not be able to create a new account using the same email address. Any active eSIM profiles will be forfeited.

7.4 Jurisdictional Notes

  • EU/EEA (GDPR): Our legal basis for processing is contract performance (Art. 6(1)(b)) and legitimate interest (Art. 6(1)(f)). For cross-border transfers, we rely on Standard Contractual Clauses.
  • United Kingdom (UK GDPR): Same rights as GDPR. Transfer mechanism: International Data Transfer Agreement.
  • Switzerland (nDSG): Rights equivalent to GDPR. Transfer mechanism: Standard Contractual Clauses recognized by FDPIC.
  • California (CCPA/CPRA): You have the right to know, delete, and opt out of sale. We do not sell personal information. You will not receive discriminatory treatment for exercising your rights.

8. Age Restriction

The Platform is not intended for individuals under the age of 16. We do not knowingly collect personal data from persons under 16. If you believe a minor has provided us with personal data, please contact us and we will promptly delete it.


9. International Transfers

Your data is primarily processed in the United States. When data is transferred internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses and equivalent transfer mechanisms recognized by applicable data protection authorities.


10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date.

For material changes that significantly affect your rights, we will provide at least 14 days' advance notice via email before the changes take effect.

Continued use of the Platform after the updated policy becomes effective constitutes acceptance.


11. Contact

For privacy-related inquiries or data rights requests:

If you are unsatisfied with our response, EU/EEA residents may lodge a complaint with their local Data Protection Authority.


12. Governing Law

This Privacy Policy is governed by the laws of the State of Wyoming, United States, consistent with the Terms of Service.