Privacy Policy
Effective date: May 9, 2026 Last updated: May 9, 2026
This Privacy Policy describes how Faxloo (“we,” “us,” or “our”) collects, uses, and shares information about you when you use our fax-by-internet service (the “Service”) at https://faxloo.com and our mobile applications.
Information We Collect
Information You Provide
- Account information: email address, password (stored hashed), name (optional)
- Payment information: processed by Stripe; we do not store full card numbers. We receive limited card metadata (brand, last four digits, expiry) for displaying your saved payment method
- Fax content: documents you upload or compose, recipient phone numbers, subject lines
- Contact list: phone numbers and names you save in the contacts feature
Information Collected Automatically
- Usage data: API request logs, fax delivery status, error events
- Device data: mobile device type, operating system version, app version (mobile app only)
How We Use Your Information
- To provide the fax transmission service
- To process payments and send transactional emails (delivery confirmations, payment receipts, failure notifications)
- To improve service reliability and debug errors
- To comply with legal obligations
Sub-processors
We share information with the following third-party service providers to deliver the Service:
| Sub-processor | Purpose | Data shared |
|---|---|---|
| Stripe | Payment processing | Email, name, payment method |
| Sinch | Fax delivery | Recipient phone number, fax document content (transmitted, not stored) |
| Supabase | Database, auth, file storage | All account and fax data |
| Resend | Transactional email | Email address, message content |
| Sentry | Error tracking | Error stack traces, request metadata (no fax content) |
| Vercel | Web hosting | Page visits, IP addresses (in server logs) |
| Render | API hosting | API request logs |
Each sub-processor maintains their own privacy practices. We have data processing agreements with each.
Data Retention
- Fax records: retained for 90 days after the fax send date, then automatically deleted
- Account data: retained while your account is active; deleted within 30 days of account deletion
- Payment records: retained per Stripe’s policy (typically 7 years for tax/audit compliance)
- Error logs: retained in Sentry per its default retention (90 days)
Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate information
- Delete your account and associated data
- Export your data in a portable format
- Object to certain processing
To exercise these rights, contact us at support@faxloo.com.
EU/EEA Users (GDPR)
We process your information based on legitimate interests (delivering the Service you requested), contractual necessity, and your consent where applicable. You have the rights described above plus the right to lodge a complaint with your local data protection authority.
California Users (CCPA/CPRA)
We do not sell or share your personal information for cross-context behavioral advertising. You have the right to know what we collect, request deletion, and not be discriminated against for exercising your rights.
Children’s Privacy
Faxloo is not directed at children under 13 (or 16 in the EU). We do not knowingly collect information from children. If you believe a child has provided us with personal information, contact us at support@faxloo.com.
Security
We use industry-standard security practices:
- All data in transit is encrypted via TLS 1.2+
- Passwords are hashed via bcrypt
- Database access is restricted via row-level security and least-privilege roles
- Payment information is handled exclusively by Stripe (PCI DSS Level 1 compliant)
No system is perfectly secure. If you become aware of a security incident affecting your data, contact support@faxloo.com.
International Transfers
Faxloo’s primary infrastructure is hosted in the United States. If you access the Service from outside the US, your data is transferred to and processed in the US. We rely on standard contractual clauses with sub-processors for transfers from the EU/EEA.
Changes to This Policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent revision. Material changes will be communicated via email or in-app notification.
Contact
Questions about this Privacy Policy? Contact us at support@faxloo.com.
This Privacy Policy is provided for informational purposes. It is not legal advice. Consult an attorney for advice specific to your situation.