Privacy Policy

1. Information We Collect

We collect only the minimum information necessary to process your fax:

• Your email address (for the delivery report)
• Your mobile phone number (if you choose to receive SMS delivery notifications)
• The recipient's fax number
• The PDF document you upload
• Payment information (processed by Stripe — we never store card details)
• IP address and browser metadata (retained temporarily for fraud prevention, anonymized after 30 days)

2. How We Use Your Information

We use your information solely for the following purposes:

• Transmit your fax to the specified recipient
• Send you a confirmation email with the transmission report
• Send you automated SMS notifications regarding the delivery status of your fax (e.g., successful delivery or failure), provided you have opted in to receive them
• Process your payment
• Detect and prevent fraudulent or abusive use of the service

We do not use your data for marketing, profiling, or advertising.

3. Data Retention

Your uploaded PDF is automatically and permanently deleted from our servers immediately after successful delivery. We do not retain copies, backups, or archives of your document. Email addresses and fax numbers are retained for 90 days to allow you to access your transmission history and request support. After this period, they are automatically purged. Payment records (transaction IDs, amounts, timestamps) are retained for 7 years in compliance with applicable tax and accounting regulations.

4. Cookies

We use a single, first-party storage key to remember your theme preference (dark or light mode). No third-party tracking, analytics, or advertising cookies are used. We do not employ fingerprinting or behavioral tracking of any kind.

5. Third Parties

We do not sell, rent, trade, or share your personal information with third parties for commercial purposes. The following subprocessors are involved strictly for operational necessity:

• Stripe — payment processing (under their own privacy policies).
• Cloudflare — DDoS protection and edge routing (may see IP addresses).
• Our fax gateway partner — receives only the recipient number and PDF for transmission (no email or payment data).

SMS Opt-In and Data Sharing: No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

6. Security

All documents are encrypted with AES-256 during transmission and at rest. All connections to our platform use TLS 1.3 / SSL. Our infrastructure is hosted in ISO 27001-certified data centers. Access to production systems is restricted to authorized personnel only, protected by multi-factor authentication.

7. International Data Transfers

As a global service, your fax data may be routed through servers located in the destination country or region. By using our service, you consent to this necessary routing. We ensure all transfers are protected by standard contractual clauses (SCCs) and encryption in transit.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your personal data ("right to be forgotten").
• Object to or restrict certain processing activities.
• Receive your data in a portable format.

To exercise any of these rights, contact us at support@faxlock.com. We will respond within 30 days.

9. Children's Privacy

Our service is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a child has used our service, please contact us immediately so we can delete the associated data.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page indicates when the latest changes were made.