COTA

Privacy policy

This policy explains how we handle your personal data when you use COTA E-SIM.

Data we collect

Account and contact: your email address (required to sign in and to deliver your order); the first name, last name, phone number, and country requested at checkout.

Purchases: your order history, amount and currency paid, promo codes used, and your wallet balance and transactions.

eSIM: the technical identifiers of the profile you bought (ICCID, activation code) and the data usage figures we receive from our supplier.

We never see your card details. Payment is completed on iyzico’s own secure page; your card number never reaches our app or our servers.

The app contains no advertising identifier, analytics, or crash-reporting SDK. We do not track your behaviour.

Why we process data

To complete your order, provision your eSIM, email your QR code and install details, show your usage, and provide support.

At checkout your IP address is passed to the payment provider for fraud screening; we do not store it.

Sharing

We only share data with service providers that deliver the service on our behalf: our connectivity (eSIM) supplier, our payment provider iyzico, and our email delivery provider.

We do NOT sell your data, do not transfer it to third parties for advertising, and do not use it to track you across other apps or websites.

How long we keep it

We keep account data for as long as your account is open.

Order, invoice, and payment records must be retained for 10 years under Turkish tax and commercial law (VUK/TTK). Even if you delete your account, these records remain in a form detached from your identity.

Deleting your account

You can delete your account from inside the app: Profile → Delete my account. Your personal data is irreversibly deleted 30 days after the request; within that window you can sign in and cancel the deletion.

Step-by-step instructions and the full list of what is deleted: /en/legal/delete-account

Your rights

You have the right to access, correct, and delete your data, and to object to its processing. Email [email protected] to make a request.

Children

The service is not directed at anyone under 18 and we do not knowingly collect data from children.