SIMcloud AI reporting privacy policy
How SIMcloud handles data used by its AI reporting connections.
Effective 24 October 2026; updated 4 November 2026. This policy covers SIMcloud account-reporting connections for compatible AI clients, including ChatGPT, Codex, Visual Studio Code, GitHub Copilot, Claude Code, Cursor, Google Antigravity and Gemini CLI, operated by Freepaid Pty Ltd. It supplements the SIMcloud account terms.
Data used and why
When you connect, SIMcloud uses your account identity and an OAuth authorization record to give the selected AI client reporting access to your account. You sign in on SIMcloud’s website; the reporting tools do not ask for passwords, API keys, one-time codes, payment-card details or government identifiers.
Depending on the report you request, the connection processes account identifiers and names, wallet balance, transaction dates and references, service type, order and delivery status, amounts and billing information, and recipient telephone numbers or meter numbers present in an existing order. Requests include the date range, filters, pagination cursor or existing order identifier needed for that report.
SIMcloud uses this information to authenticate the connection, return the requested report, diagnose failures and protect the service. Operational records can include request timestamps, IP addresses, tool or endpoint names, HTTP status, order references and error details. The reporting connection does not create purchases, send messages or return voucher redemption codes or electricity recharge PINs.
Dedicated MCP usage records measure connection reliability and feature adoption. They contain account and connection identifiers, tool names, client-reported software name and version, protocol version, timings and outcome categories. Connection events record setup, authorization, refresh and first successful use. These usage records exclude passwords, authorization codes, bearer tokens, tool arguments, report bodies, message contents and redemption codes. Access is restricted to authorized administrators.
Who receives the data
Requested report results are sent to the AI client through which you invoke the reporting tools. Your chosen client and model provider handle those results under the terms and privacy controls applicable to that service. Check the provider and account settings used by your client before requesting account information. SIMcloud’s hosting and technical service providers process the information needed to operate the service, and authorized SIMcloud support staff may access relevant records to handle support and security issues.
The reporting connection does not send a new purchase or message to a mobile network, voucher supplier or electricity provider. Existing account transactions remain subject to the disclosures described in SIMcloud’s account terms.
Retention
SIMcloud retains account and transaction records and operational request and error logs for three years. OAuth authorization codes expire after 10 minutes, access tokens after one hour, and refresh tokens after 30 days. Expiry stops a credential from being used; it does not itself delete the stored authorization record.
Revoking the connection stops its authorized future access. It does not delete existing SIMcloud account, transaction or audit records, or copies of results already returned to your AI service account.
Your controls and contact
You choose whether to connect and which reports to request. Revoke access using SIMcloud Connected Apps. Manage saved chats and data held by your AI service through that service’s account controls.
For access, correction, deletion or other privacy requests, contact customercare@freepaid.co.za. SIMcloud will explain the records affected and any retention obligations that apply. Do not include passwords, API tokens or one-time codes in your request.