What we hold, and for how long

Your document

Deleted 24 hours after transmission completes

An abandoned upload

Expires 2 hours after upload and is deleted by the next hourly sweep

Card details

Never touch our servers — Stripe handles payment

Account

There isn't one. No password to breach

Transmission record, ours

Kept. What it holds, and for how long, is in the retention policy

Transmission record, yours

Emailed to you as facts and a link, never as an attachment. Download it within 24 hours to keep the pages with it

Document hashes

Kept — 64 characters that identify a file without revealing it

Uploads travel over TLS and are stored encrypted in a private bucket. No public link to a customer document is ever created. When the fax network needs your pages it is given a URL signed fresh for that attempt, which expires in minutes.

The document is destroyed on a timer after your transmission settles, and every file destroyed on that schedule writes an audit row recording what was removed and when. A second sweep runs hourly and catches any completed transmission the timer missed. An upload you abandoned before paying is covered by the same sweep.

What survives is the transmission record, and nothing on it reconstructs the document. The retention policy describes what it holds.

Before the pages go you can download them from the link in the email that reports the outcome, confirmed or not. The retention policy says why they are worth taking, and why they do not travel as an attachment.

You keep the sensitive document; we keep a SHA-256 hash of each file as we received it. For a PDF, which reaches us unchanged, that lets you show later that the copy in your files is the one we received. A photograph is shrunk on your device before it is uploaded, so its hash is of the shrunk file.

Card details are entered into Stripe and never reach us. There is no future charge, so nothing is stored for one.

We do not market this service as HIPAA compliant, and the terms forbid a covered entity from sending protected health information through it. We have not put the vendor agreements, policies and operational practices in place that would support that claim, and we will not sign a business associate agreement. The terms of service say what that means for a covered entity, and for everyone else.

• —Check the destination number against the letter or form you are responding to. A confirmed transmission to the wrong office is still confirmed.
• —Do not use this service for unsolicited fax advertising. See the acceptable use policy.
• —Keep your own copy of anything you send. We delete ours on purpose.

If you find a security problem, write to support@faxmydoc.com and say so in the subject line. A person reads it. Related reading: the retention policy, the privacy policy, and acceptable use.