Privacy Policy
Last updated: 18 October 2026
This policy covers FaxPorter on the web and the FaxPorter app for Android. FaxPorter is operated from Canada by Mehdi El Moussali ("we", "us"), who is the data controller and is subject to Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
FaxPorter handles documents that are often sensitive — medical records, legal paperwork, financial statements. This policy is written to be specific about what happens to them rather than to be short.
What we collect
The documents you send and receive. Uploaded files, the fax pages we render from them, and thumbnails. These are stored privately and are readable only by your account.
Fax details. The destination or sending number, page count, transmission status, timestamps, and the carrier's reference for the transmission.
Your account. A user identifier, and — if you sign in — the email address and name your sign-in provider gives us. You can use FaxPorter without signing in, in which case the account is anonymous and identified only by a random identifier held in your browser.
Your fax number, if you rent one, and the faxes received on it.
Payment. We do not see or store your card. Payment is handled by Stripe through RevenueCat, who tell us only whether a subscription is active and when it expires.
Technical data. Server logs recording requests, errors and abuse signals.
Visit statistics, only if you agree to them. We use Google Analytics to count which pages people arrive on. It is switched off until you accept it, and declining changes nothing about how FaxPorter works for you. It never sees your documents, your fax numbers or who you sent to.
We do not use advertising trackers and we do not sell personal information. Our analytics tag refuses Google's advertising permissions on every single request, so nothing we collect can be used to target advertising — here or anywhere else — whatever else is switched on.
Why we handle it
- To transmit your fax and tell you what happened to it — this is performance of our contract with you.
- To take payment and determine what you are entitled to.
- To prevent abuse, particularly unsolicited faxing, which our carriers prohibit and which we are obliged to act on. This is our legitimate interest and theirs.
- To meet legal obligations, including tax.
- To count visits, so we know which pages are worth keeping. This one happens only with your consent, and you can decline it without losing anything.
How long we keep it
Documents are deleted 90 days after the fax. This is automatic and applies to sent and received faxes alike.
The record of a fax is kept — number, page count, status, time and carrier reference — so your history stays accurate and a delivery receipt remains provable after the pages themselves are gone.
Account data is kept while your account exists. Deleting your account deletes it, along with every document and every fax record, and releases any number you hold. That is immediate and cannot be undone.
Server logs are kept for a short period for security and diagnosis.
Who else handles it
FaxPorter cannot work without these, and each sees only what its job requires:
| Who | What they do | What they see |
|---|---|---|
| Google Cloud / Firebase | Hosting, database, file storage, sign-in | Documents, fax records, account data |
| Sinch | Transmits and receives faxes | The document being transmitted, and the numbers |
| RevenueCat | Manages subscriptions | Your account identifier, subscription state |
| Stripe | Processes payment | Your payment details, which we never see |
| Google Analytics | Counts page visits, only with your consent | The pages you visited and approximate location. No documents, no fax numbers |
Transmitting a fax necessarily discloses the document to our carrier and to the telephone network. That is what sending a fax is.
Data may be processed outside your country, including in the United States, under the safeguards those providers offer. FaxPorter is operated from Canada, so if you are outside Canada your data is handled there as well.
Your rights
Depending on where you live, you may have the right to access a copy of your data, correct it, delete it, restrict or object to how we use it, take it elsewhere, and complain to a regulator.
Deletion is built in: your account page deletes everything, immediately, without asking us. The same page turns visit counting on or off, whichever you chose the first time. For anything else, write to zineb@thelabsapp.com and we will respond within the period the law allows.
In Canada, you have rights under PIPEDA and may complain to the Office of the Privacy Commissioner of Canada. In Quebec, additional rights apply under Law 25.
If you are in the European Economic Area or the United Kingdom you may complain to your local supervisory authority. If you are in California you have rights under the CCPA, including the right to know and the right to delete; we do not sell or share personal information as those terms are defined.
Security
Documents are encrypted in transit and at rest, and are readable only by the account that owns them — enforced by storage rules, not only by our code. Fax records can be written only by our servers, never by a browser or an app, so a compromised client cannot forge a delivery.
The telephone network itself is not encrypted. A fax is as private as a fax has ever been, which is to say: private in transit between machines, and readable by whoever stands at the receiving one.
Children
FaxPorter is not intended for children and we do not knowingly collect their data.
Changes
We will post any change here and update the date above. Where a change materially affects you we will tell you before it takes effect.