Privacy notice

Last updated: October 14, 2026

What we collect

• Your document (the PDF you upload) and the fax number you enter.
• Your email address, used for your receipt, status link and sign-in codes.
• Order and fax records: price, time, destination country, page count, delivery result.
• A hashed network address, used only to limit abuse. We do not store your raw IP address in our order records.
• Payment details are collected by our payment processor, not by us. We receive an order reference and the amount.

What we do not do

• We do not read your documents, sell your data, or use your documents for advertising.
• We do not send your documents to AI or language-model services.

How long we keep things

• Documents on our systems: deleted after the fax finishes (delivered or failed). If a fax is under manual review we keep it for up to 7 days, then delete it. Documents you upload but never pay for are deleted within 24 hours.
• Fax carrier copies: our carrier receives your document to transmit it. Our carrier, Telnyx, does not publish how long it keeps fax media, and we have not received a commitment from it. Treat the carrier as holding a copy under its own retention practices. Deleting our copy does not delete the carrier’s copy.
• Encrypted recovery backups: the latest 14 daily database backups are retained. They can include cover text recorded before deletion, along with order metadata. Uploaded PDF bytes are not included. Carrier copies are separate.
• Order and fax records (cover text is cleared after document deletion): kept as long as needed for accounting, tax and fraud prevention, which can be several years.
• Emails: we send receipts and status messages through Cloudflare Email Service. We keep a copy of each message in our own records with the order. Your mail provider keeps its own copy.

Who processes your data for us

• Payment processor: Stripe
• Fax carrier: Telnyx
• Email delivery: Cloudflare Email Service
• Hosting: Cloudflare Workers, Durable Objects and R2. Processing can occur in any Cloudflare location worldwide

Analytics

If we turn on Google Analytics, a notice asks you first and nothing loads until you choose Allow. It sets cookies and records page paths and a few basic events, such as a PDF being accepted or checkout starting. We do not send your document, fax number, email address or order links. Choosing No thanks stops it. The choice is stored in your browser.

Security

Documents are encrypted in our storage and are accessible only to the service. Fax is not an end-to-end encrypted channel. We make no compliance claims such as HIPAA, and we do not offer business associate agreements.

Your rights and contact

You can ask us for a copy of the data we hold about you, or ask us to delete it, by writing to hello@faxtheweb.com. We reply within 30 days. We may keep records we must keep for legal or accounting reasons.