Privacy Policy

At ThirtyFax, your privacy matters to us. This Privacy Policy explains what personal data we collect, how we use it, and the choices you have. By using our platform, you agree to the practices described here.

1. Who We Are

ThirtyFax (“we”, “us”, or “our”) operates the website at www.thirtyfax.com and the associated online fax service and blog. For questions about this policy, contact us at hello@thirtyfax.com.

2. Information We Collect

We collect information in the following ways:

Information you provide directly

• Transaction data: Recipient name, destination fax number, email address, page count, and delivery status.
• Billing data: Payment method details, processed securely by our payment provider. We do not store full card numbers.
• Communications: Any messages you send us through support channels or contact forms.
• Fax documents: Files you submit are streamed for validation and transmission. Document bytes are not stored in our application database.

Information collected automatically

• Usage data: Pages visited, features used, timestamps, and session durations.
• Device and browser data: IP address, browser type, operating system, and referring URLs.
• Cookies and similar technologies: We use a secure cookie to authorize private fax-status access. Google Analytics, Microsoft Advertising, and OpenAI may also use cookies to measure site use and advertising, as described below.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the ThirtyFax platform.
• Process transactions and send billing-related communications.
• Send product updates, security alerts, and support messages.
• Send optional marketing emails — you can unsubscribe at any time.
• Analyze usage patterns to improve our services and blog.
• Detect and prevent fraud, abuse, or security incidents.
• Comply with legal obligations.

4. Legal Basis for Processing

Where required by law (such as under the GDPR), we rely on the following legal bases to process your personal data:

• Contract performance: To deliver the services you have signed up for.
• Legitimate interests: To improve our platform, prevent fraud, and communicate about relevant features.
• Consent: For marketing communications and non-essential cookies, where required.
• Legal obligation: To comply with applicable laws and regulations.

5. Cookies

We use an essential cookie so you can open your private fax-status page. That cookie is required to deliver the fax you requested and does not depend on your analytics choice.

We also use optional cookies from Google Analytics, Microsoft Advertising, and OpenAI. They help us understand how the site is used and whether an advertisement led to a paid fax. When you allow these cookies, we send Microsoft a SHA-256 hash of the email address you entered so it can match that conversion. We do not send the plain email address, and we do not send the recipient fax number for advertising. OpenAI receives a conversion event for a paid fax and does not receive your email address or the recipient fax number.

If you visit from the European Economic Area, the United Kingdom, Switzerland, or if we cannot tell which country you are in, those optional cookies stay off until you choose Accept analytics. Elsewhere, they are enabled without a banner. You can accept, reject, or withdraw that choice at any time with Cookie settings in the footer. Rejecting or withdrawing consent does not affect a fax that has already been sent.

6. Sharing Your Information

We do not sell your personal data. We may share it with:

• Service providers: Trusted third parties who help us operate the platform (e.g., cloud hosting, payment processors, analytics providers). These parties process data only on our behalf and under confidentiality agreements.
• Analytics and advertising: Google, Microsoft, and OpenAI receive usage or conversion data when analytics cookies are allowed. Microsoft also receives the hashed email described above. OpenAI receives the paid-fax conversion event without your email address or the recipient fax number. Their privacy policies explain how they handle that information.
• Legal authorities: If required by law, court order, or to protect the rights and safety of ThirtyFax or others.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you before this occurs.

7. Data Retention

We retain transaction metadata as needed to provide delivery status, process refunds, prevent abuse, and meet legal obligations. Uploaded document bytes are not retained in our application database.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you.
• Correction: Ask us to correct inaccurate or incomplete data.
• Deletion: Request that we delete your personal data, subject to legal obligations.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to certain types of processing, such as direct marketing.
• Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at hello@thirtyfax.com. We will respond within 30 days.

9. Data Security

We implement industry-standard security measures to protect your data — including encryption in transit (TLS), encryption at rest, access controls, and regular security reviews. However, no system is completely secure. In the event of a data breach, we will notify affected users and relevant authorities as required by law.

10. Children's Privacy

ThirtyFax is not intended for children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

11. International Data Transfers

Your data may be processed in countries outside your own, including countries that may not have the same data protection laws. When we transfer data internationally, we use appropriate safeguards such as Standard Contractual Clauses to ensure your data is protected.

12. Third-Party Links

Our platform and blog may contain links to third-party websites. This Privacy Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party services you visit.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. For significant changes, we will notify you by email or through a notice on the platform. Your continued use of ThirtyFax after any changes constitutes your acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please get in touch.