Privacy Policy
Last updated: [Month Day, Year]
FaxMyDoctor is operated by [Your Business LLC]. We collect only what we need to send your fax, and we don't keep your documents: they're deleted as soon as your fax is sent.
What we collect
- Your document and cover page details (which may include health information, such as a patient's name, date of birth, or medical records).
- The fax number you send to.
- Your email address, to send your confirmation or refund notice.
- Payment details, which go directly to Stripe. We never see or store your full card number.
- A one-way hash of your IP address, used only to limit abuse. We don't store the IP address itself.
Health information
We treat everything you send as health information. We collect it only with your consent, which you give before each fax, and use it only to send that fax. We never sell it, never use it for advertising, and never share it except with the service providers below that we need to deliver your fax. This site has no advertising or tracking pixels.
How we protect it
- Your document is encrypted on its way to us (HTTPS) and while it's stored, until it's deleted.
- It's stored in a private location that only our service can read, and shared with our fax carrier through a link that expires after 15 minutes.
- Like every fax, the final step travels over the telephone network, which isn't encrypted. That's how fax works for everyone, including doctors' offices.
How long we keep it
- Documents and cover page details: deleted as soon as your fax is delivered or refunded. If you upload a document but don't pay, it's deleted within an hour. We also ask our fax carrier to delete its record of your fax.
- Order records (your email, the fax number, page count, price, delivery status): kept for our accounting and to handle questions or disputes, for as long as the law requires.
Who we share it with
Only these service providers, and only to run FaxMyDoctor:
- Telnyx: transmits the fax. We tell it not to store a copy.
- Stripe: processes payment and refunds.
- Supabase: holds your document, encrypted, until your fax is sent; stores order records.
- Resend: sends your confirmation emails.
- Vercel: hosts the website.
We may also disclose information when legally required, such as in response to a valid court order.
HIPAA
FaxMyDoctor works for you, not for your doctor, so it isn't covered by HIPAA. We protect your information as described in this policy instead. Once your fax arrives, your doctor's office handles it under its own privacy obligations.
Your rights
You can ask what information we hold about you, ask us to delete your order records, or withdraw your consent. Email help@faxmydoctor.com from the address you used for your order and we'll respond within 45 days. Depending on where you live (for example Washington, California, or other states with health or consumer privacy laws), you may have additional rights, and we honor them.
Contact
Email help@faxmydoctor.com.