1. Overview
Nesoraa (“Nesoraa”, “we”, “our”, or “us”) operates the Nesoraa connectivity infrastructure platform, developer APIs, and management consoles. This Privacy Policy describes how we collect, process, retain, and safeguard information when you access our websites, integrate with our APIs, or use our services.
2. Information We Collect
We collect information necessary to provide connectivity infrastructure and maintain operational integrity:
- Account & Contact Information: Name, work email address, company name, and authentication credentials (including WebAuthn/passkey public credentials).
- API & Integration Telemetry: Scoped API keys, request timestamps, IP addresses, user agent strings, and request/response operational statuses.
- Connectivity & Provisioning Data: Profile identifiers (ICCID), operator routing telemetry, byte volume counters, and last-observed network identifiers (MCC-MNC).
- Financial & Ledger Records: Transaction logs, wallet balance changes, and double-entry accounting records.
3. How We Use Information
Information collected is used strictly for the following operational and technical purposes:
- Provisioning, routing, and maintaining eSIM profiles on partner carrier networks.
- Delivering HMAC-signed webhook notifications and maintaining operation reconciliation.
- Authenticating developers, preventing unauthorized access, and enforcing rate ceilings.
- Maintaining double-entry accounting ledger consistency and settlement records.
- Providing technical support and responding to architectural enquiries.
4. Data Retention & Immutability
Transactional and operational data associated with eSIM lifecycles and ledger entries are retained in accordance with regulatory, carrier, and financial auditing standards. Double-entry financial ledger logs and system audit logs are immutable and maintained to guarantee historical reconciliation.
5. Security & Cryptographic Protection
Nesoraa employs enterprise security controls including strict Content-Security-Policy (CSP) headers, authenticated encryption for credentials at rest, TLS 1.3 for all data in transit, WebAuthn MFA enforcement for operator consoles, and scoped least-privilege API tokens.
6. Third-Party Infrastructure Providers
We transmit necessary routing parameters to authorized mobile carrier partners (SM-DP+ operators) strictly to fulfill eSIM provisioning requests. We do not sell, rent, or trade developer or customer data to third parties for advertising purposes.
7. Your Rights & Inquiries
Depending on your jurisdiction, you may have rights regarding access, rectification, or deletion of your personal information. To exercise your rights or request technical data reviews, contact our engineering team at support@nesoraa.com.
8. Contact Information
For inquiries regarding privacy, data protection, or compliance practices, reach us via our contact page or email support@nesoraa.com.