HomePrivacy Policy
Privacy Policy
Privacy Notice
Last updated: October 10, 2026
About this Privacy Notice
This Privacy Notice is meant to give you information about what personal data we collect about you, how we use it, why we use it, and how you control the data processing.
It covers the FaxFlow mobile apps for iOS and Android, our web app at app.fax-flow.com and our website at www.fax-flow.com. Our Cookie Policy lists the cookies and similar technologies used on our websites.
Privacy at a Glance
- Your faxes stay private. We use the documents you fax, and the numbers you fax to and receive from, only to send and receive your faxes. We never sell them, never use them for advertising, and never use them to train AI models. Sent fax documents are deleted once the transmission finishes, and received faxes are deleted 30 days after they arrive (Section 8).
- Advertising our own apps. Unless you opt out, we share a hashed (encoded) copy of your email address and information about your FaxFlow purchases with Google, so we can advertise FaxFlow and measure our ads. U.S. state privacy laws may call this a "sale" or "sharing" of personal information. When you buy after clicking an ad, we also use the ad-click identifier to tell the ad platform whose ad you clicked about that purchase, so we can measure the ad. Microsoft Advertising receives only the click identifier and the purchase's time, value and any later refund, never your email address (Section 3.3).
- Opt-in where the law requires it. In the European Economic Area, the United Kingdom, Switzerland and Israel, we do not use your data for advertising unless you allow it.
- Easy opt-out. You can turn this sharing off at any time in the app, in our web app or on our website, or by sending a Global Privacy Control signal from your browser. Opting out never changes your price or features (Your Privacy Choices).
- Your rights. You can ask to access, correct, delete or receive a copy of your data, and appeal if we refuse (Sections 7, 13 and 14). Write to support@fax-flow.com.
Table of Contents
1. The Basics
1.1 Who We Are
We, FaxFlow, a business managed by Mobile Flow Ltd, offer fax delivery services through our app. Our offices are located at Kiryat HaMada St 20, Jerusalem, Israel 9777600, and our registration number is 517148722.
Mobile Flow Ltd is responsible for (the "controller" of) the personal data described in this Privacy Notice. If you have questions about our company or your privacy, or want to exercise your rights, you can contact us at support@fax-flow.com.
1.2 Definitions and Recommendations
When we refer to “app”, we mean our mobile app or web app that allows users to send faxes.
When we refer to "services", we mean our app and any services available thereon.
When we refer to our "websites", we mean www.fax-flow.com and our web app at app.fax-flow.com.
When we refer to "personal data", we mean information that is defined as personal data under law. This includes information that identifies you directly or indirectly, including unique identifiers like IP addresses or cookie IDs.
When we refer to "you", we mean any user of our app. If you are registering for the Services on behalf of a company or organization, the term "you" is also meant to refer to that company, where it makes sense from the context. When we mean to refer only to such company, we'll use the term "customer".
This Privacy Notice is meant to be read together with our Terms of Service, which you can find at https://www.fax-flow.com/terms-of-use. In general, we recommend that you routinely review this privacy notice and your preferences on our app.
2. Personal Data We Collect, How We Use It, and Why
Below is a description of the types of personal data we collect, how we use it, and the reason why we consider each use lawful. You have no legal obligation to provide us with personal data, but if you don't provide us with certain information, we may not be able to provide you with the associated services.
2.1 Contact Information
When you send us a message through the contact option on our app, on our site or any other means, we collect any data you provide, such as your name, email, the content and subject of your message.
How We Use this Data: To respond to your message or inquiry.
2.2 Registration Data
In order to access our app, you must first create an account. You can create an account by logging in through your Apple or Google account (or other third-party login, which may be available from time to time). Upon creation of your account, we will process your name, email address, and phone number, and we may receive additional personal data from your third-party login account, subject to the terms of such third party.
How We Use this Data: We use your registration information to allow you to access to our app, save your preferences, protect the security of our services, prevent fraud, and address any issues that arise. We use your contact details to communicate with you about our services, and to provide you with newsletters and/or other marketing or promotional information. For more information about our marketing activities and how you can control your preferences, see the section on Our Marketing Activities below. We may also provide you with push notifications on the device on which you use the app.
2.3 Activity and System Data (Cookies)
When you use our app or websites, we automatically collect data about your computer or mobile device, including personal data such as your IP address, device identifiers, browser and device type, the page or ad that brought you to us (including ad-click identifiers such as Google's gclid, gbraid or wbraid, or Microsoft's msclkid), usage data, metadata, and your activity on our services (for example, which pages and screens you viewed, for how long, and what you clicked). We work out your approximate country from your IP address or your device or browser settings; we do not collect your precise location. For more information about the cookies we use and how to adjust your preferences, see the Cookies and Similar Technologies section below and our Cookie Policy.
How We Use this Data: We mainly use this data to generate aggregated analytics data about the use of our services so we can maintain and improve the services and develop new products or services. We also use it to prevent fraud and abuse and protect the security of our services (for example, with Google reCAPTCHA and Firebase App Check), to apply the privacy choices that apply in your region, and to measure and improve our advertising as described in Section 3.3. The analytics tools we use are Google Analytics (including Google Analytics for Firebase in our mobile apps), Microsoft Clarity and, on www.fax-flow.com, Vercel Web Analytics, which does not use cookies. On our websites, Microsoft Clarity is set up to mask form inputs and document previews. We also share certain identifiers (such as a hashed copy of your email address) with advertising platforms (for example, Google) to advertise our own apps and measure our ads, and we do not use your fax recipients or fax contents for advertising. See Section 3.3 for details and your opt-out. For more information about how Google uses information from sites and apps that use its services, and how you can control it, see: www.google.com/policies/privacy/partners/.
2.4 Payment Data
If you purchase a subscription or credits through the services, the payment is processed by Apple (App Store), Google (Google Play) or, for purchases on our websites, by Paddle.com, which sells to you as our reseller and merchant of record. They collect your payment details under their own privacy policies. We receive information about the purchase, such as the product, price, currency, taxes, dates, renewal, cancellation and refund status, a transaction identifier and, for purchases on our websites, your billing country. We do not receive or store your full payment card number.
How We Use this Data: To provide what you bought, to process renewals, cancellations and refunds, to prevent fraud, to keep our accounting records and, as described in Section 3.3, to measure our advertising.
2.5 Communications Information
When you send a fax through our services, we collect metadata related to such fax, such as the header information, sender and recipient data of the fax.
How We Use this Data: To provide you with our services.
Fax confirmation email. When you send a fax, we ask for an email address for fax confirmations and receipts (for example, if you signed in with Apple's "Hide My Email"). We save it to your account and use it to send you those messages and other service messages about your account. We may also use it as your email address for the Customer Match and conversion measurement described in Section 3.3, in which case we send Google a hashed (encoded) copy of it, subject to your choices in Section 3A. If you opted out ("Do Not Sell or Share" or Global Privacy Control), we do not add it to Customer Match lists or include it in the conversions we report to Google. If you refused advertising, or you are in the EEA, the UK, Switzerland or Israel and have not allowed advertising, we do not use it for either.
2.6 Fax Contents (Sent and Received)
When you use our Services to send or receive a fax, we process the content of such fax, including any Personal Data contained therein. We may also access your device’s camera, photos, or files if you grant permission, to allow you to upload or attach documents.
How We Use this Data: To transmit, deliver, or receive faxes through our Services; to store received faxes temporarily; and to ensure reliable delivery and user access during the retention period.
2.7 Android's App Set ID
We collect Android's App Set ID from your device when you use our app.
How We Use this Data: We use the App Set ID for the essential purposes of analytics and fraud prevention. We do not connect the App Set ID to any Android advertising identifiers (for example, AAIDs) or any personal data for advertising purposes. We process the App Set ID in accordance with Google Play's User Data Policy.
2.8 Fax Numbers and Incoming Faxes
When you subscribe to a plan that includes a dedicated fax number (“Fax Number”), we process additional data related to that number and incoming faxes, such as:
- The assigned Fax Number and its connection with your account;
- Metadata about received faxes (date, time, sender identification, and delivery status);
- The content of received faxes for a limited time.
How We Use this Data: To provide fax receiving functionality, maintain the operation of the assigned Fax Number, enable your access to received faxes, notify you of incoming transmissions, and comply with data retention and deletion policies.
2.9 AI Processing of Recipient Fax Numbers
We operate a directory that identifies the organization associated with a destination fax number and offers related guidance (for example, the relevant department or form). When a destination (recipient) fax number is looked up, that number alone is sent to a third-party artificial-intelligence service provider (OpenAI) to identify the organization. The lookup is keyed only to the fax number and is not associated with your account, your identity, or your fax history, and we do not send the contents of your faxes or any other Personal Data. Results are stored and reused, so a given number is generally only looked up once. The provider acts as our service provider and is bound by confidentiality and data-protection obligations. You can review OpenAI's privacy practices at https://openai.com/policies/privacy-policy/.
On www.fax-flow.com you can also run a live directory search by entering an organization name or a fax number. The search text you enter is sent to OpenAI to find the organization's official fax details, and the result may be added to our fax directory. We use your IP address and Google reCAPTCHA to prevent abuse and to limit the number of searches, and we do not link the search to a FaxFlow account. Please do not enter personal information about yourself or others in the search box.
How We Use this Data: To identify the recipient organization, surface relevant directory information and form guidance, and improve and operate the directory feature.
2.10 Email to Fax
If you turn on Email to Fax, you can send a fax by emailing your documents to a FaxFlow address. When you do, our email provider (Postmark) receives the entire email on our behalf, including its sender and recipient addresses, subject, body, technical headers (such as spam and authentication results) and attachments. We use the sender address and authentication results to confirm that the email came from an address you have approved, we convert the attachments into a fax and send it as described in Section 2.6, and we send you a reply when the fax is delivered or cannot be sent. We do not fax or store the body or subject of your email. The attachments are handled like any other fax you send and are deleted after transmission (Section 8).
We keep: (i) the addresses you approve to send faxes by email and their verification status, until you remove them or delete your account; (ii) a one-time verification code for a new address, stored only in hashed form, for up to one day; (iii) a record of each email we processed (a message identifier, the sender address, the fax number(s) and the outcome) for up to 30 days, to prevent duplicates; and (iv) an activity log of each email fax (date, sender address, recipient fax number, status, page count) for up to 12 months. Emails from addresses that are not approved are discarded without a reply.
How We Use this Data: To provide Email to Fax, verify senders and prevent spoofing and abuse, send delivery replies, and keep your fax history.
3. Our Marketing Activities
As described above, we may use personal data we collect for advertising and marketing purposes. We try to limit the marketing material we send to a reasonable and proportionate level. Below we describe how you can control the marketing material you receive from us.
3.1 Email Marketing and Services Communications
We use your contact details to send you informational newsletters and other marketing material about our products and services.
You can stop the delivery of all marketing emails by following the "unsubscribe" link in any messages we send you. Alternatively, you can contact us at support@fax-flow.com to request to unsubscribe.
Note that if you are a registered user, we may need to contact you about administrative or service-related issues as part of the services we provide to you. This is not marketing communication and you will continue to receive these messages even if you opt-out of marketing emails.
We may also use information about your sending activity — including the fax numbers of the recipients you send to and the categories of organizations you contact — to recommend our own related products and features to you (for example, suggesting a dedicated Fax Number, or another app from our company relevant to who you fax). We do not sell or share this information with third parties, and we do not use your sending activity to build advertising audiences or for cross-context targeted advertising. You can opt out of these recommendations at any time by using the unsubscribe link in our emails or by contacting support@fax-flow.com.
3.2 Android Advertising ID
We collect Android's advertising identifier (AAID) from your device. We use AAIDs in accordance with Google Play's Ads Policy.
3.3 Advertising, Measurement and Your Right to Opt Out
We advertise FaxFlow on Google (Google Ads), on Apple Search Ads and, from time to time, on other platforms such as Microsoft Advertising. To do this, we share limited personal data with these advertising partners as described below. We only use it to advertise our own apps.
- Customer Match (Google). We upload a hashed (encoded) copy of the email address on your account (or the address you gave us for fax confirmations, see Section 2.5), together with information about your FaxFlow purchases (for example, whether you have subscribed, whether your subscription is active or was refunded, whether it has renewed several times, and whether you bought in our apps or on our website), to Google Ads "Customer Match" lists. Google can only match the hashed email to an existing Google account. We use these lists to avoid showing our ads to people who already subscribe, to measure our ads, and as a signal that helps Google's automated bidding reach people who are likely to be interested in FaxFlow, including people similar to our customers. We only add people who have started a FaxFlow subscription, from our iOS app, our Android app or our websites.
- Measuring our ads (conversions). When you arrive at FaxFlow from an ad, the ad platform adds an ad-click identifier to the link (for example, Google's gclid, gbraid or wbraid, or Microsoft's msclkid). When you buy or renew a subscription, or sign in to our web app for the first time after clicking a Google ad, we may tell the ad platform that its ad led to that action, using the click identifier (for clicks in the previous 90 days, or 30 days for sign-ins), the date and, for purchases, the value. For Google, we may also send a hashed copy of your email address (or the address you gave us for fax confirmations), including for renewals, so Google can match purchases it cannot match from a click identifier alone. If your sign-in email is hidden (for example, with Apple's "Hide My Email"), we may wait a short time, usually no more than about an hour, for the address you give us for fax confirmations before we tell Google about your first purchase. For Microsoft Advertising, we send only the click identifier, the date and time of the purchase or renewal, its value and currency, and whether it was a first purchase or a renewal; if that purchase is later refunded or charged back, we tell Microsoft to withdraw or reduce it. We never send Microsoft your email address or anything about your faxes. Our mobile apps also use Google Analytics for Firebase and AppsFlyer to attribute app installs and purchases to the campaigns that led to them.
- Google Analytics advertising features. For www.fax-flow.com and our mobile apps, our Google Analytics property has Google Signals turned on and is linked to our Google Ads account. This lets Google associate activity with the Google accounts of people who have allowed ad personalization in their Google account, for aggregated cross-device reporting and, unless you opt out, for Google's advertising services. On our web app (app.fax-flow.com), Google's ad-personalization signals are turned off: visits there are used to measure our ads, not to build advertising audiences.
- What we do not do. We do not run remarketing campaigns that show you ads because you visited our websites. We do not build advertising audiences from the fax numbers you send to or receive from, the organizations you fax, the contents of your faxes, or the directory, health, benefits or tax pages you view. We never share the contents of your faxes, your fax recipients or your fax history with advertising partners.
Under the California Consumer Privacy Act and similar U.S. state laws, sharing your hashed email address, purchase information and online identifiers with Google for advertising may be considered a "sale" or "sharing" of personal information for cross-context behavioral advertising, or "targeted advertising". You can opt out at any time (see Section 3A). We send Microsoft Advertising only the click identifier and purchase details described above, to measure our own ads; we treat this as a disclosure for a business purpose (ad measurement), not as a sale or sharing (Section 13.1).
What we send, depending on your choices:
| Your situation | Customer Match (hashed email and purchase information) | Ad conversion measurement |
|---|---|---|
| Default (the United States and most other countries) | Shared with Google. | Click identifier, date and value; for Google, also a hashed email. |
| You opted out ("Do Not Sell or Share" or Global Privacy Control) | Not shared, and removed from our lists. | Click identifier, date and value only. For Google, ad personalization is turned off. Microsoft never receives your email in any case. Never your email. |
| You are in the EEA, the UK, Switzerland or Israel and have not allowed advertising | Not shared. | Nothing is sent. |
| You refused advertising, or you deleted your account | Not shared, and removed from our lists. | Nothing is sent. |
When you opt out, we stop using your information for personalized advertising and exclude you from advertising audiences (such as Google Customer Match) going forward. We may continue to use the ad-click identifier to measure conversions and the performance of our own ads (for example, to know that a subscription resulted from a campaign), with Google ad personalization turned off; this is not personalized advertising. We send removals to Google within about six hours of your choice, and Google may take up to 48 hours more to process them. On www.fax-flow.com and in our web app, an opt-out (including a Global Privacy Control signal) also switches off Microsoft Clarity.
3A. Your Privacy Choices
You can control how your personal data is used for advertising and analytics. These choices are free and never change your price, your subscription or the features you can use.
| Choice | How to make it |
|---|---|
| Do Not Sell or Share My Personal Information (stops the sharing in Section 3.3 for your account) | Mobile app: Settings → Analytics → "Do Not Sell or Share My Personal Information". Web app (app.fax-flow.com): Settings → Privacy → Privacy choices. If you are not signed in, use the "Your Privacy Choices" link (in the menu on a computer, at the bottom of the page on a phone); we save the choice to your account when you sign in. By email: write to support@fax-flow.com from the email address on your account. |
| On www.fax-flow.com | Use the "Do Not Sell or Share My Personal Information" or "Cookie Settings" link in the footer and turn off "Advertising & sale/share". You are not signed in on this website, so the choice is saved in your browser. To apply it to your account as well, make the same choice in the app or web app. |
| Global Privacy Control (GPC) | We treat a GPC signal as a valid request to opt out of the sale and sharing of your personal information for the browser that sends it, in every region, without you having to do anything else, and we show that your opt-out has been honored. If you are signed in to our web app, or you buy on our websites with GPC on, we also apply the opt-out to your account. GPC also switches off Microsoft Clarity (Section 4.2) on www.fax-flow.com and in our web app for that browser. GPC does not switch off Google Analytics, which keeps running outside opt-in regions to help us understand and improve our services; you can turn it off at any time with "Cookie Settings" on www.fax-flow.com or "Your Privacy Choices" in our web app. |
| Opt-in regions (the EEA, including Iceland, Liechtenstein and Norway, the United Kingdom, Switzerland and Israel) | We do not use your data for advertising, and our websites do not set analytics or advertising cookies, until you allow it. You can change your choice at any time: in the app under Settings → Analytics ("Privacy & Tracking"), on www.fax-flow.com with "Cookie Settings", and in the web app with "Your Privacy Choices" → "Cookie and advertising preferences". We treat you as being in an opt-in region if your device or browser region, your approximate location (from your IP address), your app store country or your billing country indicates one. If www.fax-flow.com cannot tell where you are, it treats you as being in an opt-in region. |
| Refund-request information (App Store) | In the app under Settings → Analytics → "Share purchase activity for refund requests" (Section 4.2a). |
| Marketing emails | Use the "unsubscribe" link in any marketing email, or write to support@fax-flow.com. Service messages (for example, fax receipts) continue. |
| Push notifications | Turn them off in your device's notification settings. |
| Your device's advertising identifier | You can reset or limit your device's advertising identifier in your device settings (on Android: Settings → Privacy → Ads; on iOS: Settings → Privacy & Security → Tracking). These settings control your device's advertising identifier only; to stop the sharing described in Section 3.3, use "Do Not Sell or Share" as well. |
| Google's own controls | Google's ad settings (adssettings.google.com) and the Google Analytics opt-out browser add-on (tools.google.com/dlpage/gaoptout). |
| Delete your account | In the app's settings, in the web app under Settings → Account → Delete account, or by writing to support@fax-flow.com. Deleting your account does not cancel a subscription bought through the App Store or Google Play; cancel it in your store account. |
To access, correct or receive a copy of your data, or to exercise any other right, see Sections 7, 13 and 14.
4. Sharing the Personal Data We Collect
We share your Personal Data with telecommunications and infrastructure providers strictly as needed to route, transmit, and deliver your sent or received faxes, and to store them securely during the retention period. All such providers are bound by confidentiality and data protection obligations.
We do not sell the contents of your faxes, your fax numbers or the numbers you fax to anyone. We share your personal data as follows:
4.1 Customers
If you use our services in connection with a company that is our customer, that customer may have access to information about your use of our services.
4.2 Service Providers and Sub-Processors
We engage the third-party service providers and sub-processors listed below to help us operate the Services. Each provider only receives the Personal Data needed to perform its function, has agreed to confidentiality restrictions, and has undertaken to use your Personal Data solely as we direct. We may update this list from time to time as our vendors change. You can review each provider's own privacy practices by following the links below.
| Sub-Processor | Purpose | Privacy Policy |
|---|---|---|
| Telnyx | Fax telephony — transmitting and receiving faxes, and provisioning dedicated Fax Numbers. | telnyx.com/privacy-policy |
| Phaxio (Sinch) | Fax telephony for faxes sent to countries our main carrier does not serve. | sinch.com/privacy-notice |
| Google Firebase & Google Cloud | Authentication, database (Firestore), file storage, hosting, abuse prevention (App Check), and backend cloud infrastructure. | firebase.google.com/support/privacy |
| Google Analytics (GA4) | Product and website usage analytics. | business.safety.google/privacy |
| Microsoft Clarity | Product analytics, session insights, and heatmaps to help us understand and improve how the app is used. Not used on www.fax-flow.com or in our web app when your browser sends a Global Privacy Control signal or you have opted out of the sale or sharing of your personal information. | privacy.microsoft.com/privacystatement |
| AppsFlyer | Mobile attribution and measurement of marketing campaigns. | appsflyer.com/legal/services-privacy-policy |
| Postmark (Wildbit / ActiveCampaign) | Sending transactional and service emails (for example, fax confirmations, account notices and Email to Fax replies), and receiving emails sent to our Email to Fax addresses, including their attachments, on our behalf. | postmarkapp.com/privacy-policy |
| OpenAI | AI-powered fax-number directory lookups (processes the destination fax number only — not fax contents, and not linked to your account), as described in Section 2.9. | openai.com/policies/privacy-policy |
| Apple (App Store) | Processing in-app purchases and subscriptions made through iOS. | apple.com/legal/privacy |
| Google Play | Processing in-app purchases and subscriptions made through Android. | policies.google.com/privacy |
| Paddle | Payment processing and merchant-of-record services for purchases made through the web. | paddle.com/legal/privacy |
| Vercel | Hosting www.fax-flow.com, and cookieless website analytics (Vercel Web Analytics and Speed Insights). | vercel.com/legal/privacy-policy |
| Google reCAPTCHA | Protecting our website forms, directory search and web app from spam and abuse. | policies.google.com/privacy |
| Google Workspace (Gmail) | Receiving and answering support emails and contact-form messages. | workspace.google.com/terms/privacy |
4.2b Advertising and Measurement Partners
We share limited personal data with the following advertising and measurement partners, as described in Section 3.3. You can opt out as described in Section 3A.
| Partner | What they receive and why | Privacy Policy |
|---|---|---|
| Google (Google Ads, including Customer Match and Google's Data Manager; Google Analytics advertising features) | A hashed copy of your email address and information about your FaxFlow purchases (Customer Match); ad-click identifiers, dates and purchase values and, unless you opted out, a hashed copy of your email address (conversion measurement); cookie identifiers and website and app activity (Google Analytics). Used to advertise our own apps and measure our ads. | business.safety.google/privacy |
| Microsoft Advertising | If you reached FaxFlow from a Microsoft Advertising ad (for example on Bing): the ad-click identifier, the date and time of your purchase or renewal, its value, and whether it was later refunded, to measure that ad. Never your email address or anything about your faxes. | privacy.microsoft.com/privacystatement |
| AppsFlyer | Device and app identifiers and in-app events, to attribute app installs and purchases to our campaigns. | appsflyer.com/legal/services-privacy-policy |
4.2a Consumption Information (App Store and Google Play refund requests)
If you bought your subscription through the Apple App Store or Google Play, refunds are decided by that store, not by us. When you ask the store for a refund, the store may ask us whether you actually used FaxFlow during the billing period you want refunded. We call what we send back "Consumption Information". This section explains exactly what it contains, why we share it, and how to stop us. Google Play does not currently request Consumption Information from us; if it begins to, this section applies in the same way.
What we may share. Consumption Information is limited to the following, and is tied to the store's own transaction identifier rather than to your name or email:
- Your consent status — whether you have allowed us to share Consumption Information (this section, and the in-app switch described below).
- Delivery status — whether the service worked during that billing period: for example whether the faxes you sent were delivered, or whether every send failed because of a problem on our or our carrier's side.
- Consumption status — whether you used the paid service in that period: not at all, partly, or fully.
- Our refund preference — whether, based on the above, we believe the refund should be granted in full, granted in part, or declined, or that we have no preference.
- Whether you could try the app before paying — for example scanning, preparing a document or a cover page, which are available before purchase.
- Account tenure — how long you have had a FaxFlow account, expressed as a range (for example "3–10 days"), not an exact date.
- Lifetime amount purchased and refunded — the total you have paid us and the total you have been refunded over the life of your account, each expressed as a range, not an exact figure.
- Platform — the store or platform on which the purchase was made.
- Usage time — how much time you have spent in the app, expressed as a range; today we report this as "undeclared".
- Account status — whether your account is active, limited (for example suspended for a violation of our Terms), or closed.
We do not share the contents of your faxes, the numbers you sent faxes to or received them from, your documents, or your contact details as part of Consumption Information. Some of the fields above are defined by the store's refund-review interface; where the store no longer accepts a field we still compute it for our own records of the request but do not send it.
Why we share it. Solely (i) to help the store reach a fair decision on the refund request you opened with it, and (ii) to detect and prevent refund fraud and abuse, and to meet our legal and accounting obligations. We do not use Consumption Information for marketing, and the store uses it under its own privacy policy (Apple / Google). The store, not FaxFlow, decides the refund.
Legal basis. If you are in the European Economic Area, the United Kingdom or Switzerland, sharing is off unless you turn it on; turning it on is your consent, which you may withdraw at any time using the same switch. Elsewhere, sharing is on by default and we rely on our legitimate interest in helping resolve the refund request you opened, in preventing refund fraud, and in keeping accurate records — an interest we consider proportionate given the narrow, transaction-level scope of the information — and you may object at any time using the switch or by emailing support@fax-flow.com. In Israel we process this information in accordance with the Protection of Privacy Law and the notice in Section 4.2a and Annex B.
Your choice. Sharing is on by default except in the EEA, UK and Switzerland, where it is off until you turn it on. You can switch it on or off at any time in the app under Settings › Analytics › "Share purchase activity for refund requests", or by emailing support@fax-flow.com. Once it is off we do not send Consumption Information for any refund request the store asks us about afterwards; the store then decides your request without input from us. Turning it off does not affect your subscription, your ability to request a refund, or anything else in the app. Withdrawing consent does not undo sharing that already happened before you withdrew.
Retention. We keep a record of each refund request the store asked us about and what, if anything, we answered, for up to seven years from the transaction, to meet our accounting and tax record-keeping obligations, and we keep your on/off choice for as long as you have an account.
For refund reviews, Apple and Google receive Consumption Information as independent controllers and handle it under their own privacy policies (linked above), not as our service providers.
4.3 Change of Ownership
If we are looking to sell our company, liquidate assets, or merge with another, we may share your personal data with other interested parties as part of negotiations toward that transaction. In such case, or where we do sell our company, your personal data shall continue to be subject to the provisions of this Privacy Notice.
4.4 Law Enforcement Related Disclosure
We may share your personal data with government agencies or other relevant parties, such as a law office or independent auditor: (i) if we believe that such disclosure is appropriate to protect our rights, property or safety (including the enforcement of the Terms of Service and this Privacy Notice) or those of a third party; (ii) if required by law or court order; or (iii) as is necessary to comply with any legal and/or regulatory obligations, such as audit requirements.
5. International Transfers
We are based in Israel, and many of our service providers, including Google, are located in the United States or other countries. Your personal data may therefore be processed outside the country where you live. When we transfer personal data from the European Economic Area, the United Kingdom, Switzerland or Israel, we rely on a lawful transfer mechanism, such as an adequacy decision, the provider's certification under the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions), or the European Commission's Standard Contractual Clauses included in the provider's data processing terms. You can ask us for more information about these safeguards at support@fax-flow.com.
6. Security
The security of your personal data is important to us. We comply with industry standards and applicable law to make sure that your personal data will be held securely and that it will not be shared or lost accidentally. Data travels between your device and our servers over encrypted connections, and our cloud providers encrypt the data they store for us. A fax itself travels over the telephone network to the recipient's fax machine or service, which is outside our control. However, it is impossible to guarantee absolute security. The security of your data also depends on the security of the devices you use and the way in which you protect your user IDs and passwords.
7. Your Rights
Everyone. You can see, update and delete much of your data yourself in the app or web app, and you can contact us at any time to ask for a copy of your data, to correct it or to delete it. Your privacy choices are described in Section 3A.
European Economic Area, United Kingdom and Switzerland. You have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing (including, at any time, processing for direct marketing), to receive it in a portable format, and to withdraw any consent you gave, without affecting processing that took place before. We rely on these legal bases: performance of our contract with you (to provide the services and process payments); our legitimate interests (to secure and improve the services, prevent fraud, and measure our own advertising where no consent is required); your consent (for analytics and advertising cookies and for the advertising uses in Section 3.3 in these regions); and compliance with legal obligations (for example, tax and accounting records). You also have the right to complain to your local data protection authority.
Israel. See Annex B (Section 14).
United States. How to Control Our Use of Your Personal Data. Depending on which laws apply, you have certain legal rights over your data. If you are a resident of the State of California or of another U.S. state with a comprehensive consumer-privacy law (such as Virginia, Colorado, Connecticut, Utah, Texas, Oregon, or Montana, among others), depending on the applicability of certain laws and exemptions, you may have certain rights over your data, as detailed in Annex A to this Privacy Notice. To exercise your rights, please contact us at support@fax-flow.com. We may ask for reasonable evidence to verify your identity before we can comply with any request.
We respond to requests within one month in the EEA, UK and Switzerland, and within 45 days in the United States (which we may extend once, as the law allows, and will tell you if we do), or within any shorter period the applicable law requires.
8. Data Retention
We retain your personal data as long as necessary to fulfill each of the purposes we described above.
When deciding how long to store personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized access, the purposes for which the personal data was collected, as well as applicable legal requirements. Please note that we may delete information from our systems without notifying you first. Retention by any of our service providers or subcontractors may vary in accordance with each business's retention policy. Sent faxes are not stored after transmission. The contents of a fax you send — the document, its page images, and any cover sheet — are used only to carry out the transmission and are deleted from our systems once the send completes or the send attempt finishes; we do not retain the contents of sent faxes thereafter. For privacy and security reasons, received faxes are automatically deleted thirty (30) days after receipt. It is your responsibility to download or back up any received fax you wish to retain. If your subscription ends or lapses, without derogating from the generality of the foregoing, your dedicated Fax Number and associated received faxes will generally remain available for a seven (7) day grace period. After that, your Fax Number may be permanently deactivated or reassigned, and all related data deleted.
In some circumstances, we may store your personal data even after we're finished using it if required to do so by law (e.g. to fulfill tax or audit requirements), or to keep accurate records of our interactions in case there is a prospect of litigation relating to your personal data. In such cases, we will maintain the same security measures as described above.
The table below summarizes how long we keep the main types of personal data:
| Data | How long we keep it |
|---|---|
| Documents you send by fax (and their page images and cover sheets) | Deleted once the transmission finishes. |
| Faxes you receive | Deleted 30 days after they arrive. |
| Your Fax Number after your subscription ends | Kept for a 7-day grace period, then it may be released or reassigned and related data deleted. |
| Account and profile data, fax records and settings | While your account is open. When you delete your account, we delete your fax documents and fax records, release your Fax Number, and remove your name and email address from your profile. We keep only de-identified usage and purchase statistics. |
| Purchase and transaction records | As long as tax and accounting laws require (generally up to seven years). After account deletion, we keep them without your contact details. |
| Refund-request (Consumption Information) records | Up to seven years from the transaction (Section 4.2a). |
| Ad-click identifiers | Kept in your browser for up to 90 days, and with your account while it is open. We use a click identifier only for purchases within 90 days of the click (30 days for web sign-ins). In our records of the conversions we reported to an ad platform, we delete the click identifier 120 days after the conversion, or when you delete your account, whichever comes first; the rest of the record (date, value, refund status) is kept for our accounts. |
| Customer Match lists | We remove you within about six hours after you opt out, refuse advertising or delete your account. Google also expires list members it does not see again within 540 days. |
| Your privacy and consent choices | For as long as you have an account, and afterwards as long as needed to show that we honored them. |
| Cookies and similar technologies | See the durations in our Cookie Policy. |
When you delete your account, we delete your fax records and documents, your saved contacts, your My files documents, your Email to Fax settings and activity, and your Fax Number assignment, except records we must keep by law (such as transaction records for tax and accounting), from which we remove your contact details.
Please contact us at support@fax-flow.com if you would like details about the retention periods for each type of personal data we process.
9. Cookies and Similar Technologies
9.1 What are Cookies?
A cookie is a small piece of text that is sent to your device and store certain information. There are other technologies that act similarly, like web beacons, pixel tags, and Device IDs for apps, but for simplicity's sake we'll refer to them all as "cookies".
9.2 First-Party / Third-Party Cookies
We use both our own cookies (called "first-party cookies") and cookies of third-parties (called "third-party cookies"). Both we and the third party process data received from such cookies.
9.3 How We Use Cookies
While the specific names and types of cookies we use may change from time to time, they generally fall into one of the categories listed below.
| Cookie Type | Function |
|---|---|
| Necessary | These cookies allow the app to work correctly. They enable your access to the app, move around, and access different services, features, and tools. These cookies cannot be disabled. |
| Functionality | These cookies remember your settings, preferences, and other choices you make (like placing an item in a shopping cart) in order to help personalize and streamline your experience. |
| Security | These cookies help us identify and prevent security risks. They may be used to store your session information to prevent others from changing your password without your login information. |
| Performance/Analytics | These cookies collect analytical information to help us understand how you use our app, for example whether you have viewed messages, clicked on links, and how long you spent on each page. This helps us improve our app to better suit your needs. |
| Advertising | These cookies help advertisers show you ads. When we place advertising cookies, they help us track the efficiency of our advertising campaigns. Advertising cookies may track your browsing habits and activity when using our app and/or websites or apps of third parties and help us serve ads that are relevant and meaningful to you and your interests. |
| Email Analytics | These cookies are placed in messages we send you in order to track your interaction with such messages. |
9.4 Third Party Cookies
In addition to our first-party cookies, we place cookies from the third-party services listed, cookie by cookie, for both www.fax-flow.com and app.fax-flow.com, in our Cookie Policy: https://www.fax-flow.com/cookie-policy
9.5 How to Adjust Your Preferences
You can change your cookie and advertising choices at any time with "Cookie Settings" on www.fax-flow.com or "Your Privacy Choices" on app.fax-flow.com, and we honor Global Privacy Control signals (Section 3A). Most web browsers are initially configured to accept cookies, but you can change the settings so your browser refuses all cookies or certain types of cookies. In addition, you are free to delete any existing cookies at any time. Please note that some features of the services may not function properly when cookies are disabled or removed. For example, if you delete cookies that store your account information or preferences, you will be required to input these each time you visit.
10. Third-Party Services
You may have access to third-party services through our services. Please note that all use of third-party services is at your own risk and subject to such third party's terms and privacy policies. We do not take any responsibility for the performance of other services.
10A. AI and Automated Processing
Some features rely on a third-party artificial-intelligence ("AI") provider (OpenAI). Specifically, our fax-number directory sends a destination (recipient) fax number, and nothing else, to OpenAI to identify the organization associated with that number. We do not send the contents of your faxes, your account identity, or your fax history, and the lookup is not linked to your account. The AI provider acts as our service provider and is contractually bound to keep this data confidential and to use it only to provide the feature to us. For more detail, see Section 2.9 above. You can review OpenAI's privacy practices at https://openai.com/policies/privacy-policy/.
11. Children
We do not knowingly collect personal data from children under the age of eighteen (18), and we do not knowingly sell or share the personal data of anyone under the age of sixteen (16). In the event that you become aware that an individual under the age of eighteen (18) has registered without parental permission, please advise us immediately.
11A. Health Information (HIPAA)
FaxFlow is a general-purpose consumer product and is not a "Business Associate" as defined under the U.S. Health Insurance Portability and Accountability Act of 1996 and its implementing regulations ("HIPAA"), and we do not enter into Business Associate Agreements ("BAAs") by default. You must not use the Services to transmit, store, or otherwise process Protected Health Information ("PHI") as defined under HIPAA unless a BAA has been executed between you (or the Customer) and FaxFlow. If you need to send HIPAA-protected data through the Services, please contact us at support@fax-flow.com to request a BAA before transmitting any such data. You are solely responsible for ensuring that your use of the Services complies with HIPAA and any other applicable health-privacy laws, and FaxFlow disclaims liability for any PHI transmitted in the absence of an executed BAA.
Email to Fax is not covered. Faxes you send by email pass through third-party email providers (including our inbound email provider, Postmark) that are not covered by any Business Associate Agreement. Even if we have signed a BAA with you, it does not cover Email to Fax, and you must not include Protected Health Information in emails or attachments sent to a FaxFlow Email to Fax address.
Health-related information in your faxes. Some faxes, such as those to doctors, pharmacies or insurers, may contain health-related information, and the fax number of a health-care provider may itself suggest that you are seeking care. We use this information only to send and receive the faxes you ask us to, and to keep your fax history while your account is open. We never use it for advertising, and we never sell it. Residents of Washington, Nevada and other states with consumer health data laws can ask to access or delete this data, or withdraw consent, by writing to support@fax-flow.com.
12. Changes to the Privacy Notice
We may update this Privacy Notice from time to time to keep it up to date with legal requirements and the way we operate our business. We will place any updates on this webpage and change the "Last updated" date at the top. Please come back to this page every now and then to make sure you are familiar with the latest version. Earlier versions are available on request from support@fax-flow.com.
13. Annex A — U.S. State Privacy Rights
This Annex describes additional rights that may apply to you if you are a resident of certain U.S. states with comprehensive consumer-privacy laws. Sections 13.1 through 13.8 describe your rights under California law; Section 13.9 describes rights for residents of other states. The rights described here apply only to the extent the relevant law applies to you and to our processing, and subject to that law's exceptions. To exercise any right described in this Annex, contact us at support@fax-flow.com. We may ask for reasonable evidence to verify your identity, or that you are an authorized agent, before acting on a request.
13.1 Your Rights Under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA)
If you are a resident of the State of California, depending on the applicability of certain laws and exemptions, you may have certain rights over your data. Below is some general information about rights that may apply to you. We recommend that you check the law or consult with a lawyer to understand what applies in your specific case. We may ask for reasonable evidence to verify your identity or to verify that you have been authorized to act on behalf of the relevant individual. For the purposes of this section, "personal data" shall have the meaning of "Personal Information" as defined under the CCPA.
Personal information we collect, and who receives it. The table below covers the 12 months before the "Last updated" date. We collect this information from you, from your device, from app stores, Paddle and sign-in providers (Apple, Google), and from advertising and attribution partners. We use it for the purposes described in Sections 2 and 3, and we keep it for the periods described in Section 8.
| Category | Examples | Disclosed for a business purpose to | Sold or shared with |
|---|---|---|---|
| Identifiers | Name, email address, phone number, account ID, IP address, device and advertising identifiers, cookie IDs, ad-click identifiers | Our service providers (Section 4.2); AppsFlyer and Microsoft Advertising (ad measurement) | Google (a hashed email address, ad-click identifiers and cookie or device identifiers) |
| Commercial information | Subscriptions and credits you bought, renewals, cancellations and refunds | Our service providers and payment processors; Apple and Google when you ask them for a refund (Section 4.2a); Microsoft Advertising (purchase or renewal time and value, and any later refund) | Google (information about your FaxFlow purchases) |
| Internet or other electronic network activity | Pages and screens you view, clicks, the ad or page that referred you | Our analytics providers (Google Analytics, Microsoft Clarity, Vercel) | Google (activity on www.fax-flow.com and in our mobile apps, through Google Analytics advertising features) |
| Approximate location | Country or region derived from your IP address or device settings | Our service providers | Not sold or shared |
| Audio, electronic or visual information | Documents and images you fax or upload | Our fax carriers and cloud providers, only to provide the service | Not sold or shared |
| Professional or employment-related information | Your organization, if you give it to us or it appears in your faxes | Our service providers | Not sold or shared |
| Inferences | For example, which of our products may be relevant to you | Our service providers | Not sold or shared |
| Sensitive personal information | The contents of faxes you send and receive, which may include health or financial information | Our fax carriers and cloud providers, only to provide the service | Not sold or shared |
13.2 Right to Know
You have the right to request that we disclose to you any or all of the following in respect of the 12-month period preceding your request:
- The specific personal data we have collected about you.
- The categories of personal data we have collected about you. The categories we collect include identifiers, commercial information — records of the subscriptions you purchased, refund requests you made to the App Store or Google Play, and whether the service was used and delivered during a billing period — internet or other electronic network activity information, approximate location, audio, electronic or visual information (the documents you fax), professional or employment-related information, sensitive personal information (the contents of your faxes), and inferences drawn from such information, as detailed in Sections 2 and 4 and in the table in Section 13.1.
- The categories of sources from which we collected the personal data about you.
- The categories of third parties to whom we disclose personal data about you (including our service providers listed in Section 4.2 and app store operators (Apple, Google), in connection with refund requests you initiate).
- The categories of personal data about you we have sold and the categories of third parties to whom we have sold such personal data.
- The categories of personal data about you we have disclosed for a business purpose and the categories of third parties to whom we have disclosed such personal data.
- Our business or commercial purpose(s) for collecting or selling your personal data.
13.3 Right to Delete
Subject to certain exceptions, you have the right to request that we or any of our service providers delete your personal data.
13.4 Right to Correct
You have the right to request that we correct any inaccurate personal data that we maintain about you, considering the nature of the personal data and the purposes of the processing of the personal data.
13.5 Right to Opt-Out of the Sale or Sharing of Personal Data
As described in Section 3.3, we share personal identifiers (a hashed copy of your email address, ad-click identifiers and cookie or device identifiers), information about your purchases, and activity on our website and mobile apps with Google to advertise our own apps, which may be considered a "sale" or "sharing" under the CCPA. You have the right to opt out at any time, and we honor opt-outs without discrimination. You can opt out using the in-app toggle (Settings → Analytics → "Do Not Sell or Share My Personal Information"), Settings → Privacy or the "Your Privacy Choices" link in our web app, the "Do Not Sell or Share My Personal Information" link in our website footer, by emailing support@fax-flow.com, or by sending a Global Privacy Control (GPC) signal, which we treat as a valid opt-out (see Section 3A). We act on opt-out requests as soon as we can, and no later than 15 business days after we receive them. We may deny any request to opt-out that we deem, in our good-faith, reasonable and documented belief, to be fraudulent.
13.6 Right to Limit Use and Disclosure of Sensitive Personal Data
To the extent we collect any sensitive personal data about you, you have the right to instruct us to limit our use of such personal data only to the purpose of providing you with our services and certain business operation purposes. We do not use or disclose sensitive personal information for purposes that would require us to offer a "Limit the Use of My Sensitive Personal Information" option; in particular, we do not use your fax recipients or the contents of your faxes for advertising.
13.7 Right to Non-Discrimination for Exercising your Consumer Privacy Rights
You have the right not to be discriminated against for exercising any of your consumer privacy rights, such as, not being denied any goods or services or charged different prices or rates.
13.8 How to Exercise your California Privacy Rights
Contact Information. To exercise any of the rights detailed above, please submit a verifiable request to us by contacting us at support@fax-flow.com. You may only request to exercise your right of access twice within a 12-month period. We confirm receipt of a request to know, delete or correct within 10 business days and respond within 45 days; if we need more time (up to 45 more days), we will tell you why.
Submitting a Verifiable Request. In order to exercise your right to know or right to delete you must submit a request containing sufficient information that allows us to reasonably verify you are the person about whom we collected the applicable Personal Data or an authorized agent of such person, which may include details relating to your account. Any requests made through your password protected account will be verified through our existing authentication procedures for such an account.
Submitting Requests through an Authorized Agent. An authorized agent may exercise requests on your behalf. In order to exercise your right to know or right to delete through an agent, we may ask for reasonable evidence to verify your identity and the agent’s identity, and written authorization permitting the agent to act on your behalf before complying with your request. In order to submit a request to opt-out of the sale of your personal data through an agent, we may ask for written authorization permitting the authorized agent to act on your behalf before complying with your request. We reserve the right to deny the request of any agent that does not provide proof that they have been authorized to act on behalf of the applicable consumer in accordance with applicable law.
The Past 12 Months. In the past 12 months we have disclosed the following categories of personal data for a “business purpose” (as defined in the CCPA): personal identifiers, commercial information, internet or other electronic network activity information, approximate location, audio, electronic or visual information, professional or employment-related information, sensitive personal information (only to provide the services), and inferences drawn from such information, all as further detailed in Sections 2 and 4 and in the table in Section 13.1. When you ask Apple or Google Play for a refund, we disclose Consumption Information (Section 4.2a) to that store at your direction to help complete your request. This disclosure is made to complete a transaction you requested and is not a “sale” or “sharing” under the CCPA/CPRA; it is not used for cross-context behavioral advertising. In addition, we have “shared” (and, to the extent the term applies, “sold”) personal identifiers (hashed email addresses, ad-click identifiers and cookie or device identifiers), commercial information (purchase and subscription information) and internet or other electronic network activity information (activity on www.fax-flow.com and in our mobile apps) with an advertising partner (Google) for cross-context behavioral advertising of our own apps, as described in Section 3.3. We do not knowingly sell or share the personal information of consumers under 16 years of age. We have not disclosed, sold, or shared the contents of your faxes, your fax recipients, or your fax history for advertising. You may opt out of this sharing as described in Sections 3.3 and 13.5.
13.9 Your Rights Under Other U.S. State Privacy Laws
If you are a resident of a U.S. state that has a comprehensive consumer-privacy law in effect — including Virginia (Virginia Consumer Data Protection Act, VCDPA), Colorado (Colorado Privacy Act, CPA), Connecticut (Connecticut Data Privacy Act, CTDPA), Utah (Utah Consumer Privacy Act, UCPA), Texas (Texas Data Privacy and Security Act, TDPSA), Oregon (Oregon Consumer Privacy Act, OCPA), Montana (Montana Consumer Data Privacy Act), and other states with similar laws now in force (such as Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Minnesota, Maryland, Indiana, Tennessee, Florida, and others as they take effect) — you may have the following rights with respect to your personal data, subject to the exceptions and limitations of the applicable law:
- Right to access / confirm. To confirm whether we process your personal data and to access that data.
- Right to delete. To request that we delete personal data we have collected about you.
- Right to correct. To request that we correct inaccurate personal data we maintain about you.
- Right to data portability. To obtain a copy of your personal data in a portable and, to the extent technically feasible, readily usable format.
- Right to opt out. To opt out of the processing of your personal data for purposes of (i) targeted advertising, (ii) the “sale” of personal data, and (iii) certain profiling in furtherance of decisions that produce legal or similarly significant effects. As described in Section 3.3, we share identifiers (a hashed copy of your email address and online identifiers), purchase information and website and app activity with Google to advertise our own apps, which may constitute "targeted advertising" or a "sale" under these laws. You may opt out using the in-app toggle (Settings → Analytics → "Do Not Sell or Share My Personal Information"), Settings → Privacy or "Your Privacy Choices" in our web app, the equivalent link in our website footer, or a Global Privacy Control (GPC) signal, which we honor (see Section 3A). We do not use your personal data for profiling in furtherance of decisions that produce legal or similarly significant effects. Consumption Information we provide to Apple or Google Play at your direction in connection with a refund request you initiate (Section 4.2a) is not “targeted advertising” or a “sale” under these laws.
- Right to non-discrimination and to appeal. You have the right not to receive discriminatory treatment for exercising these rights, and, where the applicable law provides, the right to appeal our refusal to act on a request.
To exercise any of these rights, contact us at support@fax-flow.com. We will respond within the time period required by the applicable law. We may need to verify your identity before fulfilling your request, and you may use an authorized agent to submit a request where permitted by law. If we decline your request, you may, where the applicable law allows, appeal that decision by replying to our response or contacting us again at the same email address with the subject line "Privacy appeal". We will respond to your appeal in writing within the time the applicable law requires (generally 45 to 60 days) and explain our decision. If we deny your appeal, you may contact the Attorney General of your state.
13.10 Other Notices for California Residents
We do not disclose personal information to third parties for their own direct-marketing purposes (Cal. Civ. Code § 1798.83). We do not offer financial incentives in exchange for personal information. We do not use or disclose sensitive personal information for purposes that would give you the right to limit it under the CCPA.
14. Annex B — Your Rights Under Israeli Law
This section applies to individuals whose personal data is processed by us under the Israeli Protection of Privacy Law, 5741-1981 and its regulations (the "PPL"), as amended (including Amendment No. 13). It supplements the rest of this Privacy Notice.
14.1 Notice and Purposes of Processing
We collect and process your personal data for the purposes described in Sections 2 through 4 of this Privacy Notice — principally to provide the fax services you request, operate and secure the Services, process payments, comply with legal obligations, and communicate with you. Providing certain data is necessary to use the Services; where data is requested on a voluntary basis, we will indicate this. We are the entity that determines the purposes and means of processing your data; our contact details are in Section 14.5.
14.2 Right to Inspect and Correct Your Data
Under Sections 13 and 14 of the PPL, you have the right to inspect the personal data we hold about you, and to request that we correct, amend, or delete data that is inaccurate, incomplete, unclear, or out of date. To exercise these rights, contact us at support@fax-flow.com. We may take reasonable steps to verify your identity before responding, and we will respond within the time periods required by the PPL. If we decline a correction request, you may note your objection and, where applicable, we will record that the data is disputed.
14.3 Direct Mailing (Sections 17C–17I of the PPL)
To the extent we use your contact details and information about your use of the Services to send you marketing messages and tailored recommendations for our own products (as described in Section 3.1), this may constitute "direct mailing" under the PPL. Where these rules apply:
- Each direct-mail message will indicate that it is direct mailing, identify us as the sender, and state that you have the right to ask to be removed.
- On request, we will tell you the source from which we obtained the personal data used for the direct mailing.
- You have the right at any time to request that your data be deleted from our direct-mailing database, and we will honor that request and stop sending you such messages. You can do this by using the unsubscribe link in any message or by contacting support@fax-flow.com.
14.4 Transfers Outside Israel
We use service providers and store data on infrastructure located outside Israel, including in the United States (see the list of sub-processors in Section 4.2). Where we transfer personal data outside Israel, we do so in accordance with the PPL and its regulations governing transfers of data abroad, and we require recipients to provide an adequate level of protection for your data through appropriate contractual and security safeguards.
14.5 How to Contact Us
For any privacy request or question under Israeli law, contact us at support@fax-flow.com. If you believe your privacy rights have been infringed, you may also contact the Israeli Privacy Protection Authority (PPA).