Privacy policy

The provider of Faxies, identified in Who we are in the Terms of service, decides how your data is used and is responsible for it under the EU General Data Protection Regulation (GDPR) and Spanish data protection law. Write to support@faxies.com about anything in this policy.

• Account: your email address and, if you add them, your name, company, phone number, default cover page sender, email-to-fax addresses and notification settings. If you choose a password, our sign-in provider keeps only a one-way hash of it. If you send a fax without signing in, we create an account with the email you give us, so you can see the fax and its receipt.
• Sign in with Google: Google shares your name, email address and profile picture with us. We use the name as your sender name until you change it; we don't use the picture.
• Faxes you send: the recipient's fax number and name, your documents and cover page, the page count, the price and the delivery status. Your name or company is printed at the top of every page, as US law requires.
• Faxes you receive: the document, the sender's number if the network shows it, and the page count.
• Faxes by email: who sent the email, the addresses it went to and whether it passed sender checks. We never store the subject, the message text or attachment names.
• Payments: Stripe collects your card details. We keep the Stripe customer and payment references, the amounts and your invoices, never the card number.
• Abuse prevention: your IP address and, when you sign in, a scrambled form of your email address, to limit how many attempts can be made and to block abuse.
• Support: the emails you send us and our replies.

• To run your account and send and receive your faxes, charge for them and email you about your faxes, your plan and your account. We need this to provide the service you asked for (GDPR article 6(1)(b)). You can turn off fax notifications in Settings, but not the emails about your plan's renewal.
• To keep invoices and payment records, because tax and accounting law requires it (article 6(1)(c)).
• To prevent fraud, junk faxes and abuse, and to keep the service secure. This is our legitimate interest, and yours, in a service that works and obeys fax laws (article 6(1)(f)). You can object to it by writing to us.

We don't sell your data or share it for advertising, and we don't send marketing emails. We count how many faxes move through each step of sending on our own servers, without cookies or personal data.

• Supabase: database, sign-in and file storage.
• Vercel: hosting of the website and app.
• Stripe: card payments and invoices.
• Resend: the emails we send and faxes you send by email.
• Telnyx: sending and receiving faxes, and the numbers we give you.
• Cloudflare Turnstile: a check that you're a person when you send a fax, until your first fax is delivered.

They process data only on our instructions and to provide their part of the service. Google handles sign-in with Google under its own privacy policy. We share data with authorities only when the law requires it.

These providers store and process data mainly in the United States. When personal data leaves the European Economic Area, we rely on the EU-US Data Privacy Framework for providers certified under it, and on the European Commission's standard contractual clauses for the rest.

• Documents of each fax, sent or received, including the cover page: 30 days after the fax finishes.
• Faxes you started but didn't send: 24 hours after the last change.
• Records of faxes sent by email: 90 days.
• IP addresses and scrambled email addresses in our request counters: about a day after they were counted.
• Your account and fax history (date, numbers, pages and status): while your account exists, and 30 days more after you close it.
• Invoices and payment records: as long as tax and accounting law requires, which in Spain is up to six years.
• Your agreement to automatic renewal (when, which plan, the price and the words you agreed to) and the emails we sent about your plan's renewal: while your account exists and, after you close it, until 3 years after you agreed or 1 year after the plan ended, whichever is later, as California law requires.

If you turned on PDF attachments for received faxes, those emails stay in your inbox after we delete our copy.

• Sign-in cookies, so you stay signed in.
• A cookie that keeps the fax you're preparing for up to 24 hours, so it survives signing in.
• Your light or dark theme choice, stored in your browser, not sent to us.
• Cloudflare may set cookies needed for the Turnstile check when it appears.

All of them are needed for the service you asked for, so we don't ask for consent. We don't use analytics, advertising or tracking cookies.

You can ask us for a copy of your data, to correct it, to delete it, to limit how we use it, to send it to you or another service in a common format, or to stop using it for abuse prevention. You can update your details and notification settings in Settings, and download your documents until we delete them.

For anything else, write to support@faxies.com from your account's email. We may ask you to confirm it's you, and we answer within one month. If you close your account, we delete your data as described above.

If you think we got something wrong, you can complain to the Spanish data protection authority, the AEPD, or to the authority where you live. We'd like the chance to fix it first.

We don't sell or share personal information, as California law defines those words.

If you received a fax from a Faxies customer, or sent a fax to a customer's number, we hold your number and the document only for the times above. You can use the same rights.

Faxies isn't meant for anyone under 18, and we don't knowingly collect their data.

If we change this policy in a way that matters to you, we'll email you at least 30 days before it applies. See also how we protect your faxes.