Privacy Policy
How Fax collects, uses, shares and retains personal information from visits, accounts, documents, delivery and support requests.
Overview
Fax uses account and session data to provide access, document and recipient information to prepare the requested fax, and operational records to track processing and delivery.
The service handles information about senders, recipients and people mentioned in documents. Anyone can submit a privacy request, including people who have never opened a Fax account.
Who is responsible and who this notice covers
RELOAD TECHNOLOGIES - FZCO, based at Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates, operates Fax. Where data protection law uses the term controller, Fax acts as controller when it determines why and how to process information for accounts, billing, security and support. Use the contact details below for privacy inquiries.
This notice covers people who visit Fax, create or use an account or guest draft, communicate with support, or are identified in a fax that a user asks us to prepare or transmit. It applies to the information handled through the Fax website and workspace.
When an organization decides what documents to submit and who receives them, it is responsible for those decisions and for notices or permissions it owes to the people involved. Fax may act as its processor for document handling carried out on its instructions. Organizations that require a data processing agreement should contact us and put the required agreement in place before uploading those records.
If an organization sent us your information, contact it about the original collection or its choice to send the document. You can contact Fax directly about information it controls or for help identifying the appropriate route for a request.
Information and its sources
We receive information directly when you visit, sign in, add files, enter a destination, subscribe or ask for help. A sender can also provide a recipient’s information or include information about other people in a document. Payment and delivery providers can supply transaction and status records when their connections are used.
A recipient’s number and submitted pages are needed to route a fax. Other fields, such as the recipient’s name and cover page message, are optional where the workspace marks them as optional. If an essential field is missing, the relevant preparation, delivery or account function may be unavailable.
- Account and access
- Email, account identifier, display name when supplied, verification and recovery information, session data and notification preferences. If Google sign-in is enabled and selected, the identity provider supplies the information required for sign-in.
- Faxes and files
- Recipient fax number and country code, names and messages entered on a cover page, filenames and file contents, prepared PDFs, page counts, timestamps and recorded delivery status.
- Billing
- Plan, billing interval, payment and subscription status, and customer or transaction references. When Stripe checkout is enabled, card details are entered with Stripe. Fax uses the billing information returned by the payment service.
- Support and requests
- Your name, contact address, message, references you choose to provide, and the correspondence needed to respond.
- Technical and security records
- Request and session information, network and browser information available to the service, timestamps, error records and signals used for rate limits, security and troubleshooting.
- Connected tools
- When you authorize a client to use the CLI or MCP, Fax handles key and permission records and the account data required for the operations you request. The client can keep its own copies.
Purposes and legal bases
We use account and document information to provide the workspace, verify ownership, convert files, generate the preview and process the transmission you request. Billing records support payment, entitlement and renewal. Support messages allow us to investigate issues and respond.
Where a legal basis is required and Fax acts as controller, we rely on the basis appropriate to the purpose. You can withdraw consent for a use based on consent. Withdrawal takes effect for future processing and leaves prior lawful processing intact.
We use operational messages for account verification, recovery, billing and support. Delivery result emails depend on your notification settings and whether email delivery is configured.
- Contract or requested steps
- Provide access, prepare and deliver faxes as requested, administer subscriptions and respond to support requests connected to those services.
- Legitimate interests where permitted
- Secure accounts, prevent fraud and misuse, troubleshoot the service and handle disputes, after weighing those interests against the rights of the people affected where required.
- Legal obligations
- Maintain required accounting records, respond to valid legal orders and meet applicable privacy, security and consumer obligations.
- Consent where applicable
- Honor choices for a use that requires consent, including optional browser technologies when activated. The Cookie Policy explains how to change browser preferences.
Recipients and safeguards
Supabase supports authentication, database services and private file storage. Application hosting and document processing services handle the information needed to provide the workspace. If enabled, Stripe handles payment and billing, an email service handles messages, and the configured fax provider receives the destination and prepared document to perform the transmission.
A submitted fax can pass through telecom networks to the receiving endpoint. The recipient can store, print or forward its copy. Review the recipient before submitting documents. If you use a third-party sign-in or checkout service, its own privacy information also applies to its handling of your data.
Authorized team members and service providers may access information needed for their assigned work, including support, security and document processing. If you connect an external client, the information you ask it to retrieve also becomes subject to that client’s settings and provider terms. Revoking a key prevents future use of that key. Contact the client provider about copies it already holds.
We may disclose limited records where required by law or reasonably necessary to respond to a valid legal process, investigate security incidents or protect rights. See the Trust Center for information about provider roles.
Files are stored privately and protected file operations check account ownership. Where needed, authorized access uses time-limited file links. Store downloaded copies safely and keep account credentials private.
Use the account controls to protect sessions and revoke any exposed connection keys. Notify Fax promptly if you suspect unauthorized access. Where required, Fax will notify affected people and competent authorities of qualifying security incidents.
International handling
Fax operates from the United Arab Emirates. Hosting, document processing, support and delivery can involve providers in other countries. A fax also travels to the destination you select. The recipient and its local network may handle the document under rules different from those in your location.
Where a transfer is restricted by applicable law, Fax must have a valid basis for it. Depending on the transfer and the law, this can involve an adequacy decision, approved contractual safeguards or a permitted exception. Contact us to ask which countries, providers and safeguards apply to a specific transfer and how to obtain a copy of relevant safeguards where available.
Confirm any location, residency or contracting requirement with Fax before uploading regulated documents. The available processing location depends on the service and provider configuration.
Retention and deletion
We keep information for the purposes for which it is used. Relevant factors include whether the account and fax are active, whether records are needed to respond to a request, and obligations relating to billing, fraud prevention or legal claims.
Drafts and prepared PDFs are retained while needed for the workspace or a pending transmission. Removing a fax starts removal from active records and cleanup of the associated stored files. Copies used for recovery may be removed on a separate schedule. We may retain limited records when needed for billing, security, an outstanding request or a legal hold and keep their use limited to those purposes.
You can remove eligible fax records from your workspace or submit a Data Removal request. Closing an account is a separate process. Some billing, security and request-handling records can require continued retention. If an exception applies to your request, we will explain it to the extent permitted.
Closing a workspace or deleting a fax affects copies under our control. Recipient copies, downloads and records held independently by other parties follow their own handling and retention rules.
Your rights and choices
Depending on your location, you can ask for access to your personal information, correction, deletion, restriction, a portable copy or review of an objection. Where processing relies on consent, you can withdraw that consent for the relevant use.
Rights and exceptions depend on the law covering the person and processing. Where applicable, you can ask for information about categories, sources and disclosures, and exercise any right to opt out of covered sale, sharing or targeted advertising. When the law gives you the right to appeal a decision or use an authorized representative, follow the Data Removal process. Exercising a privacy right will not be used to discriminate against you where the law prohibits it.
Follow the Data Removal and privacy requests process to describe what you need. We may verify identity or authority and protect information about other people before providing or removing records.
If you are concerned about how information was handled, contact us first if you wish. You may also complain to the data protection regulator with jurisdiction. See the Cookie Policy for browser storage and session controls.
Changes to this notice
We update this notice when our handling of information, provider arrangements or legal obligations change. We will provide any notice or request for consent required for material changes. Contact us if you need to know which notice applied when a specific record was collected.
Contact
RELOAD TECHNOLOGIES - FZCO
Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates