We request data needed to operate the service. We do not sell your personal data or use it for targeted advertising.
Scope of this policy
This policy explains data processing on the Sultan Plus website and in the Sultan + app. Sign-in uses your device’s UDID, not a Telegram account. If you contact us through Telegram, we can see the information and messages you share there.
Data we process
Device and service data: your UDID, device model, internal account or device reference, subscription status, associated certificates and signing files, and information about plans, orders and activation codes used.
Payment data: the USD order amount, payment method, invoice reference, payment status and transaction references supplied by the payment provider. We do not request your full card details, private wallet keys or recovery phrase.
Operational and support data: sign-in sessions, language and theme preferences, network addresses and security logs needed to prevent abuse, and messages or attachments you send to support. When you upload an IPA for website signing, we process the file and app metadata needed to fulfil your request; signing inside the native app takes place on your device.
Why we use data
We use data to link your device, manage subscriptions and orders, issue and deliver signing certificates and check their status, perform requested signing and installation, verify payments, answer support requests, and protect the service against fraud and abuse.
When we share data
Our certificate provider receives the device information needed, including the UDID, to complete registration and certificate issuance involving Apple’s services. The payment provider receives information needed to process and verify your payment. Hosting, storage and security services, including Cloudflare and Turnstile, may process network and request data to deliver and protect the service.
Telegram carries support messages you send through it. Our operations team may also receive Telegram alerts containing internal order and device references, order amounts and service statistics. Those alerts do not contain full UDIDs, certificate files, activation keys or secret payment credentials. Do not send wallet or card secrets in support messages.
Storage & protection
We use access controls and technical safeguards to reduce unauthorized access, but no transmission or storage method is completely secure. Keep copies of your certificate files and their passwords in a safe place and do not share them with others.
We retain data as needed to operate your subscription, maintain certificate records, reconcile payments and disputes, and meet legal and security obligations. Temporary upload and signing files are subject to operational cleanup and expiry; they are not permanent backup storage. Removal from backups and logs may take longer according to their retention cycle.
Cookies & preferences
We use cookies and local storage for sessions, language and theme preferences, and security features. Disabling them may prevent sign-in or saved preferences. You can change language using the language switch or remove site data in your browser settings; this does not automatically cancel your subscription or delete order records.
Access, correction & deletion requests
Contact support to request access to, correction of or deletion of your data under the rights that apply to you. We may need to verify your connection to the device or order first. We may retain records needed to prove payments, comply with the law or resolve disputes. Deleting your account data with us does not undo an earlier Apple registration or a transaction recorded on a blockchain.
Updates & contact
We publish updated versions here with their date. Changes apply going forward with any notice required by law; they do not remove mandatory rights or retroactively change an earlier order. If additional consent is required for data processing, we will request it separately.
Need a little clarity?
Contact the Sultan Plus team about these policies, your data or an order.