Effective 2026-07-08 · How AccessCore handles personal data on the platform.
AccessCore operates a billing and access-management platform for internet service providers and hotspot operators. For our own account holders (Operators) we are the data controller. For your subscribers' data that flows through the platform, the Operator is the controller and we are the processor acting on their instructions.
Operator accounts: business name, contact name, email, phone, login credentials (passwords are hashed), and audit logs of console activity. Subscriber data (on behalf of Operators): usernames, contact numbers, plan and payment records, network session and accounting records, and device identifiers needed to authenticate access. Technical data: IP addresses, timestamps and logs used for security, fraud prevention and troubleshooting.
To provide and secure the Service, authenticate network access, calculate and collect fees, prevent fraud and abuse, provide support, and meet legal obligations. Payment instructions are passed to the mobile-money and card providers each Operator configures; AccessCore does not store full card numbers.
We share data only with: infrastructure and email/SMS providers used to run the Service; payment providers configured by the Operator; and authorities where required by law. We do not sell personal data.
Access is encrypted in transit, sensitive credentials are encrypted at rest, backups are encrypted and stored off-site, and access to production is restricted. No system is perfectly secure, but we work to protect data and to detect and respond to incidents.
We keep data for as long as an account is active and as needed for billing, legal and audit purposes, then delete or anonymise it on a defined schedule. Operators can request export or deletion of their tenant data, subject to records we must retain by law.
Depending on your jurisdiction ([jurisdiction to be confirmed]) you may have rights to access, correct, export or delete personal data, or to object to certain processing. Subscribers should contact their own Operator first, as the Operator controls that data. To exercise rights against AccessCore directly, contact [email protected].
We may update this policy; material changes will be notified in-console or by email. Questions: [email protected].