Privacy policy

Exactly what we hold

This table is the complete list. If a category of data is not here, we do not collect it.

Phone number

When you top up airtime or data, or buy a vanity number — it is the number receiving the goods

Email

When you buy an eSIM — it is where the installation QR is sent; and when you create an account

Order history

Service purchased, amount, time, payment status

Bank transaction data

The reference and reconciliation result returned by your bank — we do NOT receive your card number or banking credentials

Device & logs

Device type, operating system, IP address, access time — used for security and fraud prevention

Light/dark preference

Stored in localStorage on your own device, never sent to us

We do not collect precise location, contacts, photos, microphone, camera or biometric data. We do not sell your data to anyone.

Every category ties to one job

• Delivery: the mobile number to top up the right handset, the email to send the eSIM QR.
• Payment reconciliation: matching what the bank reports against the right order.
• Support & complaints: looking a transaction back up when you ask.
• Fraud prevention: spotting unusual payments and protecting accounts.
• Accounting and tax obligations: retaining records as the law requires.

We do not use your data for scoring, profiling or targeted advertising.

Three parties, no more

• Carriers and eSIM providers: they receive the mobile number or the profile request — the part needed to deliver, nothing beyond it.
• Banks and Napas: to process and reconcile your payment.
• Competent state authorities: on a lawful written request.

Beyond those three, nobody receives your data from us.

Held for the required period, then deleted

• Transaction records: 10 years, under accounting regulations.
• Technical logs: 12 months.
• Account data: until you ask us to delete the account.

When you delete your account we remove your personal profile, but we must still retain transaction records until the statutory period ends. What remains is no longer linked to your login.

What you can ask for

• A copy of the data we hold about you.
• Correction of anything inaccurate.
• Deletion of your account and the personal data attached to it.
• Withdrawal of consent you previously gave.
• To complain about how we handle your data.

Send requests to the support email under Contact. We reply within 30 days. Account deletion is free and needs no reason.

Technical measures

All connections to the platform use HTTPS. Data is stored on servers located in Vietnam, with role-based access control and access logging. Buyers' money sits in a guarantee account at a commercial bank, separate from the company's operating account.

We will never ask for your banking password, an OTP or your card number — not even by phone. If someone claiming to be Anipay asks for those, it is a scam; report it through our complaints channel.

If a data breach affecting you occurs, we notify you on the platform and by email within 72 hours of discovering it, together with what you should do next.

Not intended for under-16s

We do not knowingly collect data from anyone under 16. If we find that we have, we delete it. Parents who discover their child has provided data should contact us and we will remove it immediately.

Who to ask about this policy

Data controller

CÔNG TY TNHH JARVIS NEXTGEN TECHNOLOGY JSC

Tax code

0305260309

Registered office

194/11M Bach Dang, Ward Binh Thanh, Ho Chi Minh City, Vietnam

Data protection email

info.minhphat.87@gmail.com

Hotline

0993686868

When this policy changes, the date at the top of the page changes with it. For changes affecting your rights we give at least 7 days' notice on the platform.