Privacy Policy
Effective date: April 12, 2026 · Last updated: April 12, 2026
Echo Persona LLC ("Company," "we," "us," or "our") operates the FaxSnapmobile application (the "App") and the website faxsnap.app (the "Site"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our App and Site. By using FaxSnap, you agree to the practices described in this policy.
1. Information We Collect
1.1 Information You Provide
- Account information: When you sign in with Apple or Google, we receive your email address (if you choose to share it) and a unique identifier from the identity provider. We do not receive or store your Apple ID password, Google password, or any other credentials.
- Fax recipient numbers: The fax numbers you enter when sending a fax.
- Sender name: If you choose to include a cover page, the name you enter is embedded in the fax document.
1.2 Information Created During Use
- Fax documents: Scanned or imported documents are assembled into a PDF on your device and temporarily uploaded to our secure servers for transmission. See Section 4 for retention details.
- Fax metadata: Recipient fax number, page count, transmission status, timestamps, and delivery confirmations.
- Purchase records: Product identifiers, transaction IDs, and credit balances associated with in-app purchases.
- Device tokens: Expo Push Notification tokens for delivering delivery confirmations and failure alerts.
1.3 Information We Do NOT Collect
- We do not read, analyze, or retain the content of your faxed documents beyond the temporary transmission window.
- We do not collect your precise or coarse location.
- We do not access your contacts, photos, or calendar.
- We do not collect device identifiers for advertising (IDFA/GAID).
- We do not use any advertising SDKs or ad networks.
- We do not engage in behavioral tracking or profiling.
1.4 Analytics (Website Only)
Our website uses Vercel Analytics, which collects anonymous, aggregated page-view data. No cookies are used for tracking. No personal information is collected through website analytics.
2. How We Use Your Information
- To authenticate your identity and maintain your account.
- To transmit fax documents to the recipient number you specify.
- To track your credit balance and process in-app purchases.
- To send you push notifications about fax delivery status.
- To provide customer support when you contact us.
- To detect and prevent fraud, abuse, and unauthorized access.
- To comply with legal obligations.
We do not use your information for advertising, marketing, or profiling purposes.
3. Legal Basis for Processing (EEA/UK Users)
If you are located in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, we process your personal data under the following legal bases:
- Performance of a contract: Processing necessary to provide the fax transmission service you requested (Article 6(1)(b) GDPR).
- Legitimate interests: Fraud prevention, security, and service improvement, balanced against your privacy rights (Article 6(1)(f) GDPR).
- Consent: For push notifications — you can withdraw consent at any time via your device settings (Article 6(1)(a) GDPR).
- Legal obligation: Where required to comply with applicable laws (Article 6(1)(c) GDPR).
4. Data Retention
| Data type | Retention period |
|---|---|
| Fax PDF documents | Automatically deleted within 24 hours of transmission |
| Fax metadata (recipient, status, timestamps) | Retained for the life of your account |
| Account information (email, auth ID) | Retained until account deletion |
| Purchase records | Retained for 7 years (tax/legal compliance) |
| Push notification tokens | Retained until account deletion or token invalidation |
| Recent fax numbers (on-device) | Stored locally on your device only; never uploaded |
5. Third-Party Service Providers
We share your data with the following third parties solely to operate the service. We do not sell, rent, or trade your personal information.
| Provider | Purpose | Data shared |
|---|---|---|
| Supabase (AWS) | Database, auth, file storage | Account info, fax metadata, PDFs (temporary) |
| Twilio | Fax transmission over PSTN | Fax PDF, recipient number |
| RevenueCat | In-app purchase validation | User ID, purchase receipts |
| Apple (APNs) | iOS push notifications | Device push token, notification content |
| Google (FCM) | Android push notifications | Device push token, notification content |
| Vercel | Website hosting + analytics | Anonymous page-view data (website only) |
Each provider is bound by their own privacy policies and, where applicable, data processing agreements. We require all processors to handle data in accordance with applicable law.
6. International Data Transfers
Our servers are located in the United States. If you access FaxSnap from outside the US, your data will be transferred to and processed in the US. For EEA/UK users, transfers are conducted under Standard Contractual Clauses (SCCs) or equivalent safeguards as required by GDPR Chapter V.
7. Data Security
- All data in transit is encrypted via TLS 1.2+.
- All data at rest is encrypted (AES-256 on Supabase/AWS).
- Authentication tokens are stored in encrypted on-device storage (MMKV with encryption).
- Row-Level Security (RLS) policies ensure users can only access their own data.
- Fax documents are automatically purged within 24 hours.
- Edge functions use service-role keys that are never exposed to clients.
No system is 100% secure. If we discover a data breach that affects your personal information, we will notify you and applicable authorities within 72 hours as required by GDPR Article 33.
8. Your Rights
8.1 All Users
- Access: Request a copy of all personal data we hold about you.
- Correction: Request correction of inaccurate data.
- Deletion: Request deletion of your account and all associated data.
- Withdraw consent: Disable push notifications via device settings at any time.
8.2 EEA/UK Users (GDPR)
In addition to the above, you have the right to:
- Data portability: Receive your data in a structured, machine-readable format (JSON/CSV).
- Restrict processing: Request that we limit processing of your data.
- Object to processing: Object to processing based on legitimate interests.
- Lodge a complaint: File a complaint with your local Data Protection Authority (DPA).
8.3 California Residents (CCPA/CPRA)
- Right to know: You may request the categories and specific pieces of personal information we have collected.
- Right to delete: You may request deletion of your personal information.
- Right to opt out of sale: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
- Non-discrimination: We will not discriminate against you for exercising your CCPA rights.
In the past 12 months, we have collected the categories of personal information described in Section 1. We have not sold or shared any personal information as defined by the CCPA.
8.4 How to Exercise Your Rights
Email privacy@faxsnap.app with your request. We will verify your identity using the email associated with your account and respond within 30 days (or 45 days for CCPA requests if an extension is needed). Account deletion requests will be processed within 30 days; purchase records may be retained for up to 7 years for legal compliance.
9. Children's Privacy
FaxSnap is not directed to children under 13 (or under 16 in the EEA/UK). We do not knowingly collect personal information from children. If we learn that we have collected data from a child under the applicable age, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at privacy@faxsnap.app.
10. Do Not Track Signals
The App does not track users across third-party websites or services, so we do not respond to Do Not Track (DNT) signals. We do not use any advertising identifiers, tracking pixels, or third-party analytics in the mobile app.
11. Cookies and Similar Technologies
The FaxSnap mobile app does not use cookies. Our website uses essential cookies only (no tracking cookies). Vercel Analytics collects anonymous, aggregated data without cookies. We do not use any third-party tracking cookies.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last updated" date. For significant changes, we will also notify you via email or an in-app notification. Your continued use of FaxSnap after such changes constitutes acceptance of the updated policy.
13. Contact Us
If you have any questions about this Privacy Policy, your data, or your rights, contact us:
- Email: privacy@faxsnap.app
- Company: Echo Persona LLC
- General support: support@faxsnap.app
For GDPR-related inquiries, you may also contact your local Data Protection Authority.