Privacy Policy | FaxDrop

FaxDrop ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect information when you use FaxDrop at faxdrop.com.

The short version

We do not retain copies of your uploaded documents. We keep only the records needed to send faxes, show status, manage accounts, handle billing, and support customers.

Information We Collect

When you send a fax, we collect: your name and email address, the recipient fax number, the document you upload, and optional cover-page details such as recipient name, subject, cover note, sender company, sender phone, and saved account branding. We do not retain copies of the document. It is streamed to our fax transmission provider and deleted from FaxDrop-controlled processing after transmission completes or fails.

How We Use Your Information

We use your email address for delivery confirmations, account fax history, support, credit and free-tier accounting, fraud prevention, security checks, and optional product guidance when you consent at checkout. We use your name, recipient fax number, and optional cover-page details to prepare and transmit your fax. We do not sell or rent personal information, or provide it for another company to market its products.

Optional Product Emails

Stripe Checkout may ask whether you want product guidance, practical fax tips, and occasional feedback requests from FaxDrop. We send these messages only after you opt in. When this lifecycle is active, Resend receives your email address, subscription status, topic and segment membership, a general summary of the credits or plan purchased, and delivery or preference events needed to run the sequence. Every message includes an unsubscribe link. You may withdraw consent at any time, and opting out does not block delivery, billing, security, support, or other service messages needed to operate your account.

Document Handling

Your uploaded documents are not retained on FaxDrop servers beyond the duration of a single transmission. Files are transmitted through Sinch, our fax transmission provider, and deleted from FaxDrop-controlled processing when the send attempt completes or fails. We do not retain copies of your documents.

Cookies and Tracking

FaxDrop uses a session cookie (HttpOnly, first-party) to track your free fax usage across your current session. This cookie does not contain personal information and expires after 30 days. We use Google Analytics to understand aggregate usage patterns. You may opt out via browser settings.

Data Retention

Fax status details, raw sender email addresses tied to fax history, delivery confirmations, timestamps, page counts, credit usage, and account fax history are generally retained for 90 days. Hashed email keys used for free-tier, credit, fraud-prevention, security, consent, and suppression checks may be retained longer when needed. A short-lived lifecycle queue may hold an opted-in email address until the related email sequence begins. Resend holds the lifecycle contact, subscription preferences, and related marketing history while FaxDrop uses that provider record to run and manage the email program. FaxDrop can delete the active Resend contact when honoring an applicable deletion request. FaxDrop may retain a limited local hashed record needed to honor an unsubscribe, prevent abuse, protect security, or meet a legal obligation. Some account indexes, billing, support, or legal records may also be retained longer when needed.

Third-Party Services

FaxDrop uses Sinch for fax transmission, Stripe for payment processing and checkout consent capture, Vercel for hosting, Upstash for Redis data storage, Resend for email delivery and unsubscribe preferences, Sentry for error monitoring, Google for sign-in and website analytics, and Discord for support-ticket routing and operational fax alerts. Each provider has its own privacy policy. Stripe processes payment information directly. FaxDrop never sees or stores your payment card details.

Security

All data in transit is encrypted using TLS. FaxDrop application records use SHA-256 hashes for some rate-limiting and lookup keys. Infrastructure and security providers may process request metadata, such as IP addresses, to operate and protect the service.

Your Rights

You may request deletion of personal data we hold by emailing hello@faxdrop.com. Please include the email address used to send the fax or sign in, so we can locate raw status records, account records, and hashed usage records. We cannot look up fax records by document contents because documents are not retained.

Contact

Questions about this policy? Email us at hello@faxdrop.com.