Instant QR · 18-lang support
|
GoRoam.Now
Concierge

GoRoam.Now eSIM

Privacy Policy

Last updated: June 2026.

This policy explains what personal data GoRoam.Now, a brand of Vxera Inc. (“GoRoam.Now”, “we”) collects when you visit the GoRoam.Now marketplace and dashboard, book travel (flights, hotels and car rentals), use the AI travel concierge, or join the partner program — why we collect it, how it is processed, and the rights you have over it. This policy is scoped to the GoRoam.Now service. The broader vxera.ai voice/AI platform has its own policy.

1. What we collect

  • Account data: email, hashed password (or Google OAuth identifier), full name and country.
  • eSIM order data: destination, plan, amount, last-4 of payment method (held by Stripe, not by us), ICCID and activation timestamps of the eSIM you purchased.
  • Travel booking data: when you search or book flights, hotels or cars, we process your trip details (routes, dates, destinations, traveller count, and — where you book in-app — passenger/guest names and contact details required by the airline or hotel). Payment is handled by our payment processor or the relevant supplier; full card numbers never touch our servers.
  • AI Concierge data: the messages, trip preferences, saved reservations and (if you upload them) receipts you share with the concierge, stored row-locked to your account.
  • Device data: browser user-agent, timezone and approximate region for currency detection. We do not collect IMEI.
  • Affiliate attribution: a first-party cookie (vxera_aff, 30-day) used to credit creators for sales they referred, plus a hashed (sha-256 + salt) IP for fraud filtering.
  • Support data: messages you send to our chat, contact or bug-report forms and ticket system.

2. How we use it

  • To deliver, activate and support your eSIM purchase.
  • To send transactional email (receipt, QR, top-up reminders) to the address used at checkout.
  • To detect and prevent fraud, abuse and chargebacks.
  • To pay our affiliate partners accurately.
  • To improve plan recommendations and reliability of our service.

We do not sell your personal data. We do not run cross-site advertising trackers on the eSIM marketplace. We do not share customer email addresses with affiliate partners.

3. Sub-processors

  • Supabase — primary application database and authentication.
  • Stripe — payment processing for eSIM and in-app purchases. Card details never touch our servers.
  • Vercel — application hosting / edge network.
  • eSIM Access & partner aggregators — to provision the eSIM profile you purchased.
  • Duffel — live flight search and, where you book in-app, ticketing and flight payment.
  • LiteAPI & hotel partners — live hotel availability, pricing and booking.
  • Discover Cars — car-rental search and supplier booking.
  • AI model providers — to power the travel concierge. We send only the conversation context needed to answer you; providers do not train on your data.
  • Resend / SendGrid — transactional email delivery.

3a. Travel bookings

When you book a flight, hotel or car, we share only the details that the airline, hotel or rental supplier needs to fulfil and confirm your booking (such as traveller names, dates and contact details). Those partners process that data as independent controllers under their own privacy policies. We never sell this data and we never hand customer email addresses to affiliate creators.

4. Cookies

We use the minimum cookies needed to operate the service:

  • sb-… — Supabase auth session (essential).
  • vxera_aff / vxera_visitor — partner attribution & fraud filtering (functional).
  • vxera_currency — remembers your preferred display currency (functional).

We do not run third-party advertising or social-network trackers on the GoRoam.Now marketplace. You can clear cookies at any time from your browser; doing so will sign you out and remove referral attribution. For the full breakdown, see our Cookie Policy.

5. Your rights

Depending on your country (GDPR, CCPA, UK GDPR, LGPD), you have the right to access, correct, delete and export your personal data, and to object to certain processing. Email privacy@goroam.nowand we will respond within 30 days. Account deletion can also be self-served from Dashboard → Settings.

6. Retention

Order and tax records are retained for seven (7) years to satisfy financial regulations. Support transcripts are retained for two (2) years. Marketing-list opt-ins are retained until you unsubscribe.

7. International transfers

GoRoam.Now eSIM operates from the United States. Your data may be processed in the US, EU and other jurisdictions where our sub-processors operate. We rely on Standard Contractual Clauses where required.

8. Contact

privacy@goroam.now for privacy questions. See also the GoRoam.Now eSIM Terms of Service.