Draft, not in effect. Waiting for a lawyer's review.
Privacy Policy
Faxbase lets teams send and receive faxes online. This policy explains what we collect when you use faxbase.app, what we do with it, and the choices you have. We don't sell your information, and we don't show ads.
What we collect
- Your account: your email address and, if you add one, your name.
- Passkeys: if you save one, its public key and the date you added it. The private key never leaves your device.
- Your team: its name, who's in it, each person's role, and the email addresses of people invited to join.
- Contacts: the names, fax numbers and groups your team saves.
- Faxes: the documents your team sends and receives, the numbers they went to or came from, page counts, delivery status, times, and the names of uploaded files.
- Security records: when people sign in and out, failed sign-ins, who opened or deleted a fax, and changes to the team, each with the IP address, browser and time.
- Email delivery: if an email we send to you bounces or is marked as spam, we record that and stop emailing that address.
We don't collect payment card numbers. We don't use analytics, advertising or tracking tools.
How we use it
- To provide the service: sending and receiving your faxes, keeping your team's inbox, contacts and history, and signing you in.
- To send you email you need: sign-in codes and team invitations. Emails say something happened, never what a fax contains.
- To keep the service and your faxes secure: rate limits, the audit log your team's owners and admins can review, and investigating misuse.
- To meet legal obligations, such as answering a valid legal request.
We don't read your faxes or use them for anything except delivering and storing them for you. We don't use your faxes to train AI models.
Patient information
If your team is a HIPAA covered entity or business associate, Faxbase signs a Business Associate Agreement with you. For patient information, that agreement controls how we use and protect it, and it comes before this policy where the two differ.
How long we keep it
- Faxes and contacts stay until your team deletes them. Deleting a fax removes it from your team right away; we keep the file and its record so it can be recovered and audited.
- When a team closes, at its owner's request, we can hand back its faxes and contacts, then destroy every fax file, fax and contact for good.
- Database backups are kept for 35 days, so deleted information can remain in backups that long.
- Security records are kept for six years. They refer to people and faxes by ID, never by contents.
- Your account stays until you ask us to delete it.
How we protect it
Everything is encrypted in transit and at rest, each team's faxes are kept apart from every other team's, and every access to a fax is recorded. The security page has the details.
Your choices
- You can change your name and passkeys in Settings, and sign out of every device.
- Your team's owners and admins can remove people, and anyone can leave a team.
- To get a copy of your information, correct it, or have it deleted, email hello@faxbase.app. We'll answer within 30 days. Faxes and contacts belong to the team, so we act on those at the request of the team's owner.
Children
Faxbase is a service for businesses and isn't meant for children. We don't knowingly collect information from anyone under 16.
Changes to this policy
If we change this policy, we'll update the date at the top. If a change matters, we'll also email the people it affects before it takes effect.
Contact
Questions about privacy go to hello@faxbase.app. Security issues go to security@faxbase.app.