Privacy Policy

• Account information: name, email address, sign-in provider (secured by Cloudflare — we never see your password), billing address.
• Device & service information: ICCID, EID, router model and ecosystem, activation records, and your data eSIM profile.
• Usage data: data usage totals needed to provide and bill service.
• Technical data: IP address, device identifiers, and analytics used to maintain and secure the Service.
• Support data: messages you send through our AI assistant and support channels to help answer your questions.

• Provide, activate, and maintain your wireless service and eSIM.
• Deliver your eSIM QR code to the email address on your account.
• Process payments and send billing invoices.
• Operate and improve the AI support assistant.
• Send service and account notifications (not marketing) you request.
• Comply with legal obligations, including lawful requests from regulators.
• Detect, prevent, and address fraud, abuse, and security incidents.

Where the GDPR or the California Consumer Privacy Act (CPRA) apply, our lawful bases include contract performance, consent, legitimate interests, and legal obligation. Where required, you have the right to request access to, correction of, deletion of, or a portability copy of your personal data, and to opt out of the sale or sharing of your personal information. AirWave does not sell personal information. Contact [email protected] to exercise your rights. We respond to verified requests within 30 days.

• Network & infrastructure providers such as our underlying data carriers (as MVNO host network), required to deliver service to you.
• Payment processors for billing (PCI-DSS compliant).
• Identity providers (via Cloudflare) for authentication — we receive only the profile information you permit.
• Law enforcement/regulators when required by law or valid legal process.

We use essential cookies for authentication and security. These cannot be switched off because sign-in and checkout depend on them.

Analytics. With your permission we use Google Analytics 4 (GA4) to understand which pages are useful and where people get stuck. GA4 is a Google product, it sets cookies, and it identifies visitors by device. If you decline it is never loaded and no analytics cookies are set — see the Cookie Policy for the full breakdown and for how to change your choice. We do not use GA4 for advertising or remarketing.

First-party measurement. We also record anonymous page views and Core Web Vitals on our own servers. This uses no cookies, contains no advertising identifiers, and is never shared with third parties.

You can disable cookies in your browser, though some features may not work.

We retain account data while your account is active and delete or anonymize personal information within 90 days after termination, subject to legal or billing retention requirements (e.g., tax records). Support chat transcripts are retained for up to 2 years to improve the assistant and resolve disputes.

Communications are encrypted in transit (TLS). Account data is encrypted at rest. Our authentication uses OAuth (Sign in with Cloudflare), and we never store plaintext passwords. Access to personal data is restricted to authorized personnel with least-privilege controls.

The Service is not directed to children under 13 (or under 16 where applicable law requires). We do not knowingly collect information from children. If you believe a child has provided us personal information, contact us and we will delete it.

AirWave primarily stores data in the United States. If you access the Service from outside the US, your information may be transferred to and processed in the US, which may have different data-protection laws, and by using the Service you consent to such transfer.

Questions? Contact [email protected]. We may update this policy; material changes will be posted at least 14 days before taking effect.