Data deletion
Delete your account and data
You can ask at any time for your Sirocco account and the data linked to it to be deleted, without giving a reason. There are three ways:
- In the Sirocco app: Account screen, then “Delete my account”.
- On the website, once signed in: Account, then Delete my account.
- By email: write to support@sirocco.mobi from your account’s email address, subject “Delete my data”. If you write from another address, we may ask for proof that the account is yours.
No account (purchase without an account, or a traveller who received an installation link)? Write to support@sirocco.mobi stating your order reference, or the email address or mobile number concerned.
Timing
From the app or the website, deletion takes effect 7 days after your request, giving you time to change your mind. You are signed out as soon as the request is recorded; to cancel before the scheduled date, sign in again and cancel the request from the same page.
During a trip in progress, deletion is only possible once the trip has ended.
A request by email is handled within one month at most. We confirm by email once the deletion is done.
What is deleted
Your profile (email address, name, link to your Google or Apple account), your preferences, saved cards, installation links, travel credit, regular travellers, your contact details in help requests, sign-in sessions, and the advertising tracking data linked to your purchases (click identifiers, Meta cookies, IP address, hashed email).
eSIMs already installed keep working until the end of their validity, but can no longer be topped up or tracked.
What is kept, and why
- Invoices and accounting records: 10 years, a legal obligation (article L123-22 of the French Commercial Code, Code de commerce), with no link to your deleted profile. They remain available by email on request, with your order reference.
- Records of orders and eSIMs (destination, dates, plans, amounts), detached from your identity: 3 years after the trip, as evidence in case of a dispute or payment chargeback.
- Help request exchanges, without your name or email: 3 years after the request is closed, as evidence.
- Technical and security logs: 12 months, for the security of the service.
- A record of the deletion (date, without your contact details), so that we can prove your request was handled.
- Payment data held by Stripe: Stripe keeps transaction data for the periods the law requires of it, under its own privacy policy.
This data is used only for these obligations and is deleted when these periods end. Details are in the privacy policy, Retention periods section.
Data received through Facebook and Instagram (Meta)
Sirocco uses a Meta app for one thing only: publishing its own content (text, photos, videos) on Sirocco’s Facebook Pages and Instagram accounts, and reading the overall statistics of these posts (reach, number of likes, comments, saves and shares).
This app collects no data about website visitors or about people who follow, like or comment on our posts: no name, no profile, no message. Sirocco does not offer sign-in with Facebook or Instagram. The only data received from Meta concerns Sirocco’s own accounts: identifiers and names of our Pages and Instagram accounts, and access tokens, stored encrypted.
- Remove the app’s access: if you authorised it (for example to manage a Page with us), open Facebook, Settings & privacy, Settings, then Apps and websites; choose the app and select “Remove”. The related access tokens then stop working and we erase them.
- Ask for data to be deleted: write to support@sirocco.mobi, subject “Meta data deletion”. We delete the data concerned and confirm by email within one month at most.