Privacy Policy

Last updated: 2026-06-09 · Preliminary version under legal review.

Movisim (CNPJ 41.004.794/0001-49) takes your privacy seriously. This policy explains what personal data we collect, why, with whom we share it, and what your rights are, in accordance with the Brazilian General Data Protection Law (Lei nº 13.709/2018, LGPD).

1. Controller and data officer

The data controller is Movisim. For any matter relating to personal data, contact our data protection officer (DPO) at dpo@movisim.com.

2. What data we collect

• Registration and contact: name, email, phone/WhatsApp and, when required for the tax invoice, CPF (Brazilian taxpayer ID).
• Order and service: plans purchased, destination, travel dates, eSIM identifiers, and purchase history.
• Payment: data processed by the payment provider. We do not store your full card details.
• Browsing: essential cookies and technical data required for the site to function (see the Cookie Policy).

3. How we use your data

• To provide the service: provision and deliver the eSIM, offer support, and process refunds.
• To comply with legal and tax obligations, including issuing and retaining tax invoices.
• To send communications about your order and lifecycle messages (installation, trip, renewal) by email and WhatsApp.
• To prevent fraud and protect the security of transactions.

4. Legal bases

We process your data based on the performance of a contract (delivery of the service), compliance with a legal obligation (fiscal/tax), legitimate interest (security and fraud prevention), and consent (marketing communications, where applicable).

5. Who we share with

We share data only with providers necessary for the operation, by category:

• Payment processing (Pix and card charges).
• Connectivity provisioning (the eSIM partner that activates the plan).
• Messaging (sending email and WhatsApp).
• Hosting and infrastructure (database and edge).
• Tax invoice issuance.

The complete, up-to-date list of subprocessors is available upon request to the data officer.

6. International transfer

To deliver connectivity outside Brazil, some data may be transferred and processed abroad by the connectivity partner and by infrastructure providers. We apply the safeguards required by the LGPD for such transfers (art. 33).

7. How long we keep it

• Transaction data is kept for the legal/tax period (5 years).
• Other personal data is kept for as long as necessary for the purposes above and, when you request deletion, it is anonymized or erased, except for what the law requires us to retain.

8. Your rights (LGPD)

You may request access, correction, anonymization, portability, information about sharing, and deletion of your data, as well as withdraw consent. See how to exercise these rights on the LGPD: Data subject rights page or write to dpo@movisim.com.

9. Security

We adopt technical and organizational measures to protect your data. No system is completely immune to incidents; in the event of a relevant incident, we will notify you and the ANPD (the Brazilian data protection authority) as required by law.

10. Changes

This policy may be updated. The date at the top indicates the version in effect.

Movisim