Privacy Policy

MyNomadToolkit is a product and service brand operated by Go Helvetia LLC, a Wyoming limited liability company with its principal mailing address at 30 North Gould Street, Suite R, Sheridan, WY 82801, United States (“Go Helvetia,” “we,” “us,” or “our”). This Privacy Policy explains how we handle personal information when you visit https://mynomadtoolkit.com, create an account, purchase products, or use MyNomadToolkit phone, fax, travel eSIM or Wi-Fi Protection features. It is designed to be accurate for our current practices and to give you clear choices. 1. Scope This Policy applies to personal information we process as a business about customers, website visitors, and account users. It does not cover third-party websites or apps we do not control. 2. Information we collect Depending on how you use the Service, we may collect: • Account data — name, email address, password hashes or OAuth identifiers, and profile details you provide. • Billing data — purchase history, amounts, coupons, and payment metadata from our payment processor (we do not store full card numbers on our servers when Stripe or a similar processor is used). • Communications metadata — phone numbers you own or dial, message/fax timestamps, delivery status, and similar records needed to operate telecom features. • Content you upload — documents or media you send via fax or messaging features, stored as needed to deliver the transmission. • Technical data — IP address, device/browser type, approximate location derived from IP, logs, and security signals. • Support content — messages you send to our support or legal inboxes. • Wi-Fi Protection — account-linked device identifiers, device names, VPN public keys, assigned tunnel addresses and connection information used to provide VPN access and enforce the device limit. While connected, device internet traffic, including DNS requests, passes through our VPN server, which also receives the source IP address. The tunnel encrypts traffic between your device and the VPN endpoint; this does not make a destination's unencrypted HTTP traffic encrypted beyond that endpoint. On Android we show a separate VPN disclosure before connecting and ask for affirmative consent, followed by Android's VPN permission. You can decline and use the other features, turn the connection off, or withdraw consent on the Wi-Fi Protection screen. With consent, the app can reconnect on Wi-Fi while the screen is active; it does not redirect advertising traffic for monetisation. We do not claim that VPN use makes you anonymous or that every third-party destination is secure. 3. How we use information We use personal information to: create and secure accounts; provision numbers, fax, and eSIM products; process payments and prevent fraud; provide customer support; monitor reliability and abuse; comply with law; and communicate service notices. We do not sell personal information for money. We do not use personal information for cross-context behavioral advertising as a primary business model. 4. Legal bases (where required) Where applicable privacy laws require a legal basis, we rely on contract performance, legitimate interests (security, service improvement, fraud prevention), consent where we ask for it, and legal obligations. 5. Sharing We share information with service providers who help us operate the Service, which may include cloud hosting (such as Cloudflare), authentication providers, payment processors (such as Stripe), and telecom/eSIM partners (such as SignalWire or other carriers). We require them to use data only to provide services to us. We may disclose information if required by law, to protect rights and safety, or in connection with a corporate transaction involving Go Helvetia LLC. For a US voice number, the emergency address you provide is sent to our telecom carrier so it can register the address and confirm E911 status. To fill a US city and state when you enter a ZIP code, we may send that five-digit ZIP to a postal-code lookup service; the street address you type is not sent to that lookup. 6. Cookies and similar technologies We use essential cookies and local storage to keep you signed in and to operate the dashboard. See our Cookie Policy for details. Non-essential analytics cookies, if introduced later, will be disclosed and consented to where required. 7. Retention We retain account, billing, and communications records for as long as your account is active and as needed for security, disputes, tax, and legal compliance, then delete or de-identify them according to our retention schedules unless a longer period is required by law. You can request account deletion from the app or at https://mynomadtoolkit.com/account-deletion. A received request is not a completed deletion: we must cancel active services, remove credentials and eligible content, and confirm required provider cleanup. Request status is shown in the account-deletion flow. Minimum invoices, transaction and tax/dispute evidence may be retained under our business policy for seven years after the relevant tax year ends, subject to applicable requirements and legal holds. This does not mean we retain unrelated messages, fax documents or VPN credentials for that period. Shared records may remain available to other authorised members where needed to provide their service. 8. Security We implement administrative, technical, and organizational measures appropriate to the nature of the Service. These include: HTTPS/TLS for every session and for delivery of documents to carriers; short-lived, signed download links that expire within two hours; internal storage keys never sent to a client; credentials for connected services encrypted at rest with AES-256-GCM; sign-in session tokens stored only as hashes; owner-scoped access so one account can never read another's documents; type and size validation on uploads; outbound media fetched only from allow-listed carrier hosts; and emergency destinations outside the gated 911 path are blocked. We do not claim certifications we do not hold: the Service is not HIPAA-, SOC 2-, or ISO 27001-certified. No method of transmission or storage is completely secure. 9. Your rights and choices Depending on your location (including rights that may apply under laws such as the CCPA/CPRA for California residents), you may have the right to request access, correction, deletion, portability, or information about sharing. You may also object to or restrict certain processing where those rights apply. To submit a request, email hello@mynomadtoolkit.com. We will verify your identity before fulfilling requests. You may appeal a denial by replying to our decision email. Authorized agents may submit requests where the law allows, subject to verification. 10. International transfers We and our processors may process data in the United States and other countries. Where required, we use appropriate transfer safeguards. 11. Children The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child provided information, contact hello@mynomadtoolkit.com. 12. Changes We may update this Policy by posting a revised version with an updated date. Continued use after changes means you acknowledge the updated Policy. 13. Contact Privacy inquiries: hello@mynomadtoolkit.com Go Helvetia LLC 30 North Gould Street, Suite R Sheridan, WY 82801 United States https://mynomadtoolkit.com Document revision: 2026-10-26-vpn-disclosure-v5