atlas
How we handle your data
What we collect, why we keep it, how long we keep it, and how to have it removed.
Last updated: July 9, 2026
The essentials
- We collect only what the service requires: your chat identity, your messages to the bot, and your order history.
- We never receive or store your card number. Payments are processed by payment providers such as Apple Pay and Google Pay.
- We do not run ads, sell data, or use analytics cookies on this website.
- To access or delete your data, message the bot or email support@xforgemobile.com.
This policy covers the atlas eSIM service on Telegram (@AtlasEsimBot), on WhatsApp (our WhatsApp business number), and this website. The atlas service, including Atli, the chat assistant, is operated by XForge Mobile ("we", "atlas"), which is responsible for the data described here. The policy applies the same way on both chat apps; the only difference is what each platform gives us, listed below.
What we collect
| Data | What exactly | Why |
|---|---|---|
| Chat identity | On Telegram: your numeric Telegram ID and first name. On WhatsApp: your phone number. That is what each platform shares with a business you message. | It is how the chat reaches you and how your orders stay attached to you. |
| Messages to the bot | What you type to Atli, including destination searches (which we log to improve coverage) and the device models you ask about. | Answering you, and learning which destinations people want that we do not carry yet. |
| Orders | Destination, plan size and duration, price paid, eSIM activation code, purchase and expiry dates. | Delivering your eSIM, powering My eSIMs (top-ups, rebuys), expiry reminders, atlas coins. |
| Support conversations | Messages and screenshots you send after asking for a human. These are relayed to our support team so a person can reply. | Fixing your issue. |
| Referral, gift and promo codes | Your personal invite code and any code you redeem or catch. A gifted eSIM additionally links your chat identity with the recipient's (and, on Telegram, the giver's first name appears on the gift card). | Making friend discounts, gifted eSIMs and promo drops work, and enforcing their one-per-person rules. |
What we never collect
- Card numbers. Payments are handled by payment providers (Apple Pay, Google Pay, card processors). We receive a confirmation that you paid, never your card details.
- Your location. We know the destination you shop for, not where you are. Your eSIM traffic goes through mobile networks, not through us.
- Your other chats. We only ever see messages you send to the atlas bot.
- Website tracking. This site has no analytics, no ad pixels, and sets no tracking cookies.
Who processes it for us
We run on a small set of infrastructure providers, each seeing only what its job requires:
- Telegram and Meta (WhatsApp) carry the chat itself. Your messages to us also fall under Telegram's privacy policy or WhatsApp's privacy policy, like any chat with a business there.
- Render hosts the bot, Supabase stores orders and referral data, Cloudflare serves this website. Like most hosts, they keep short-lived technical logs (such as IP addresses and timestamps) for security.
- Payment providers process payments under their own policies.
That is the whole list. We do not share your data with advertisers, data brokers, or anyone else, and we never sell it.
Data retention and deletion
We keep personal data only as long as it is needed to provide the service, or as long as we have another legitimate ground to hold it, and never longer than the law permits. The specific periods:
- Order and plan records are kept for up to 3 years after your last plan expires. They power My eSIMs, one-tap rebuys, atlas coins and your passport, and cover refund or dispute questions.
- Payment confirmations are kept as long as accounting and tax law requires. We never hold card numbers at any point.
- Support conversations (messages and screenshots you send our team) are kept for up to 2 years, then deleted.
- Search logs are de-identified within 12 months: we drop the link to your chat identity and keep only the searched destination.
- Referral, gift and promo code records are kept while you use atlas, since they enforce one-per-person rules.
When a retention period ends, or when you ask us to delete your data, it is either securely erased or anonymized so it can no longer identify you. Deletion requests are honored within 30 days: message the bot (talk to a human) or email support@xforgemobile.com. Deleting your data removes your order history, coins and passport stamps; installed eSIMs keep working until they expire.
Your rights
Wherever you are, we honor the strong version of data rights (the GDPR-style set): see what we hold about you, get a copy, correct it, or have it deleted (see the retention section above for how deletion works). Just ask, in the chat (talk to a human) or by email at support@xforgemobile.com.
Service messages
We message you about your own eSIMs, for example when a plan is about to run out. These are service messages, not marketing. We do not send promotional broadcasts.
Children's data
atlas does not knowingly collect personal data from anyone under 18, and the service is not directed at them. If you are under 18, please do not send us personal data. If we learn we have collected data from someone under 18, we delete it as quickly as possible; if you believe that has happened, contact us at support@xforgemobile.com.
International transfers
Our providers above may process data outside your home country. We keep the data minimal (see the table), which is the best privacy protection there is.
Changes
If our data practices change, we update this page and the date at the top. Big changes get a notice in the bot.
Contact
Questions, requests, complaints: support@xforgemobile.com, or just message the bot and ask for a human.