Privacy Policy
This Policy explains what information SIMORA Calls processes, why it is processed, who may receive it, how long it may be kept and what rights may be available to you.
1. Scope and controller contact
This Policy applies to the SIMORA Calls website, account, Telegram experience, supported applications and support interactions. “SIMORA Calls”, “we” or “us” refers to the operator of the service at calls.simora.me. Privacy and data requests: calls@simora.me.
2. Account and security data
We process account information such as name, email, language and status, plus authentication and security data such as password hashes, one-time-code records, session or token hashes, login times, IP address, user agent and security events.
3. Telegram, contacts and call metadata
When used or linked, Telegram may provide a user ID, language and authentication data. If you save contacts, we store the contact name and telephone number. For calls we process metadata such as dialed number, destination, time, duration, status, provider identifiers and billing records.
4. Call audio
SIMORA Calls does not intentionally store call audio as part of the standard service. Audio is necessarily transmitted in real time through telecom and network providers to complete a call. Call metadata and provider records may be retained.
5. Payments
Payment-card details are entered into Stripe components and processed by Stripe. SIMORA Calls receives transaction identifiers, amount, currency, status, refund and dispute data needed to administer the account. We do not store the full card number or CVC.
6. Purposes and legal bases
We use information to provide and secure accounts, authenticate users, route calls, show call history, calculate and expire minutes, reconcile provider records, process payments/refunds/disputes, provide support, prevent fraud and comply with law. Where GDPR or similar law applies, the basis may be contract, legal obligation, legitimate interests in operating and securing the service, or consent where required.
7. Service providers and international processing
Information may be processed by telecom/routing providers (including Zadarma where configured), hosting and email providers, Stripe, Telegram and other technical suppliers. Internet, payment and telecom services can involve processing in multiple countries; where required, legally recognized transfer safeguards or another lawful transfer basis are used.
8. Cookies and local storage
We use technical cookies or similar storage needed for login sessions, security and language preference. Third-party services such as Stripe or Telegram may use their own technical storage in their own context under their policies.
9. Retention
Information is kept only as long as reasonably necessary for service delivery, security, billing reconciliation, payment disputes, legal claims, accounting and mandatory record-keeping. Expired sessions, temporary challenges, stale tokens and technical logs are periodically cleaned. Some payment, call and ledger records may need to be retained longer.
10. Security
We use measures such as password hashing, hashed access/refresh tokens, session controls, rate limits, restricted administrative access, encryption of configured service secrets and audit logging. No internet service can guarantee absolute security.
11. Your rights
Depending on applicable law, you may have rights to access, correction, deletion, restriction, objection, portability, withdrawal of consent and information about processing. Israeli privacy law, the GDPR or other local laws may provide additional rights. We may verify identity and may retain information where a legal exception or obligation applies.
12. First-party analytics and attribution
SIMORA Calls uses its own server-side analytics to understand visits, referral domains, UTM campaigns, device type, interface language and use of the website, Telegram bot, Telegram Mini App and Android application. We do not use Google Analytics for this feature and we do not store raw IP addresses or full external referrer URLs; technical identifiers are converted into one-way server hashes. Detailed analytics events are normally retained for up to 180 days for product, security and operational analysis.
13. Children, automated controls and changes
SIMORA Calls is not designed for children to purchase and use independently; where a person cannot legally consent, a lawful representative should act. Automated technical controls are used for rate limits, destination allowlists, minute checks, duplicate-payment protection and fraud/security controls. We may update this Policy when the service, providers or legal requirements change and will publish the current version and date here.