Privacy Policy

eDev Connect · Last updated 6 October 2026

1. Who we are

This policy applies to the eDev Connect platform, including the mobile app, the third-party portal and the backoffice portal. The data controller is Eclectic DEV, Hoteit Center, Tayouneh, Third floor, Beirut, Lebanon.

For privacy questions or requests, contact info@edevconnect.net.

2. Personal data we process

Depending on how you use the service, we may process these categories of personal data:

• Account data: name, email address, phone number and login credentials. Passwords are stored only in hashed form.
• Verification data: email verification codes and their status.
• Profile data: profile details and images you choose to provide.
• Transaction data: purchase, order and payment references. We do not store full payment card numbers.
• Device and notification data: push notification tokens and device information needed to deliver notifications.
• Technical data: request identifiers, IP address and access logs used for security, fraud prevention and troubleshooting.

3. How we use personal data and legal bases

• To provide the service (accounts, eSIM and product purchases, profiles, notifications): performance of a contract (GDPR Art. 6(1)(b)).
• To verify identity and keep accounts secure, including email verification and duplicate-request protection: legitimate interests (Art. 6(1)(f)) and contract (Art. 6(1)(b)).
• To process payments and meet accounting and legal obligations: legal obligation (Art. 6(1)(c)).
• To send service messages and notifications: contract (Art. 6(1)(b)). Marketing messages, where offered, are sent only with your consent (Art. 6(1)(a)).
• To prevent fraud, abuse and security incidents: legitimate interests (Art. 6(1)(f)).

4. We do not sell your data

We do not sell, rent or trade your personal data. We share data only with the service providers needed to run the platform, and only to the extent necessary for those services.

5. Who we share data with

• Infrastructure and hosting providers that run the platform and store data.
• Push notification providers, such as Firebase Cloud Messaging, to deliver notifications.
• Email delivery providers to send verification and service emails.
• Payment and telecom partners needed to complete purchases and provision services.
• Public authorities where we are legally required to disclose data.

Where a provider processes data outside the European Economic Area, we rely on appropriate safeguards, such as Standard Contractual Clauses, as required by GDPR Chapter V.

6. How long we keep data

We keep personal data only as long as needed for the purposes above. Account data is kept while your account is active and for a limited period after closure where required by law. Transaction records are kept for the period required by accounting and tax law. Security logs are kept for a limited period needed for security monitoring.

7. Your rights

Under the GDPR, you have the right to:

• access the personal data we hold about you;
• correct inaccurate or incomplete data;
• request erasure of your data, where applicable;
• restrict or object to certain processing;
• receive your data in a portable, machine-readable format;
• withdraw consent at any time, where processing is based on consent;
• lodge a complaint with a supervisory authority.

To exercise your rights, email info@edevconnect.net. We respond within one month, as required by GDPR Art. 12.

8. Security

We use technical and organisational measures to protect personal data, including encryption in transit, access controls, hashed passwords and request tracking to prevent duplicate or tampered requests.

9. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last changed. Material changes will be communicated through the service.