Privacy Policy — Simbye eSIM Finder for ChatGPT

This Privacy Policy applies to the Simbye eSIM Finder application

(the "App") available in the ChatGPT App Directory and operated by

Street, Covent Garden, London, WC2H 9JQ, United Kingdom).

1. What the App does

The App allows ChatGPT users to discover and compare Simbye eSIM travel

data plans by sending free-text queries (e.g. *"Find me a Japan eSIM

with unlimited data for 10 days"*). The App returns matching plans

from Simbye's public catalogue with a direct link to simbye.com.

purchases happen on simbye.com after the user clicks an outbound link.

2. Data we receive from ChatGPT

When you use the App through ChatGPT, the following data may be

transmitted to our servers:

• Tool call arguments — for example a country code (JP), trip

duration (10), data preferences (unlimited: true), or a free-text

trip description (e.g. "10 days Japan + Korea").

• Standard HTTP request metadata — IP address, User-Agent, and

request timestamp (provided automatically by your ChatGPT client and

Cloudflare's network).

We do not receive your name, email, ChatGPT account information,

chat history, payment data, or any other personal identifier from

ChatGPT.

3. How we use the data

We use the received data only to:

• Filter and return matching eSIM plans from our public catalogue.
• Generate a personalised tracking link with our discount code

(CHATGPT15) for attribution.

• Maintain server logs for security, debugging, and abuse prevention.

We do not:

• Sell or share your data with third parties.
• Use the data for advertising or profiling.
• Combine the data with information from other sources.

4. Data retention

• Tool call arguments are processed in-memory and not persisted.
• HTTP server logs (containing IP address, timestamp, and request

path) are retained for up to 30 days for security and abuse

prevention, then automatically deleted.

5. Cookies and tracking

The App itself does not set cookies. When you click the outbound link

to simbye.com, our website may set cookies as described in

The tracking parameter ?ref=chatgpt is appended to outbound links

purely for traffic-attribution analytics on simbye.com.

6. Data sharing and processors

We use the following processors:

All processors operate under appropriate data-protection agreements

including GDPR compliance for EU/UK residents.

7. Your rights (GDPR / UK GDPR)

If you are based in the EU, EEA, UK, or Switzerland, you have the

following rights regarding any personal data we may hold:

• Right to access — request a copy of your data
• Right to rectification — correct inaccurate data
• Right to erasure — request deletion of your data
• Right to restriction — limit processing
• Right to object — object to processing
• Right to data portability — receive your data in a portable format

We will respond within 30 days.

8. International data transfers

Some of our processors operate outside of the EEA / UK. Where

applicable, transfers are protected by **Standard Contractual Clauses

(SCCs)** approved by the European Commission and the UK ICO.

9. Security

We implement industry-standard security measures including:

• TLS 1.3 encryption for all data in transit
• Cloudflare WAF and DDoS protection
• Server isolation and regular security patches
• No long-term storage of personal data

10. Children's privacy

The App is not directed at children under 16. We do not knowingly

collect personal data from children. If you believe a child has

provided us with personal data, please contact

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The "Last updated"

date at the top reflects the most recent change. Material changes will

be communicated through the ChatGPT App listing or via this page.

12. Contact

SIMBYE LTD

71-75 Shelton Street, Covent Garden

London, WC2H 9JQ

United Kingdom

Email: privacy@simbye.com

General: sales@simbye.com

Companies House: 15310933

13. Supervisory Authority

If you are unsatisfied with our handling of your data, you have the

right to lodge a complaint with your local data-protection authority:

• UK: Information Commissioner's Office (ICO) — ico.org.uk
• EU: Your national supervisory authority
• Other: Local data protection regulator