This Privacy Policy explains how Contorta Developement LLC ("Contorta," "we," "us," or "our") collects, uses, discloses, and protects personal information when you use FaxBase, including our website and application at https://faxbase.contorta.dev and related services (collectively, the "Service").
FaxBase is intended for adults and is not directed to children. By using the Service, you acknowledge the practices described in this Privacy Policy.
1. Who We Are
Contorta Developement LLC is the entity responsible for FaxBase.
Mailing address: 77 W 4800 N Unit A202, Provo, UT 84604, United States
Privacy and support contact: contact@contorta.dev
We act as the business responsible for your account and billing information. For the contents of the faxes you send and receive, we process them on your instructions in order to provide the Service.
2. Information We Collect
2.1 Account information
When you create an account we collect your email address and, if you sign in with Google, your name and the profile details Google shares with us. We also keep your account role, preferences, and account timestamps. If you sign up with a password, it is handled by our platform provider's authentication service; we do not see or store it in readable form.
2.2 Fax content and fax details
To send a fax you upload documents, and you may add a cover page and recipient details. When someone faxes your FaxBase number, we receive the document and the sender's number. We store the documents themselves, the sending and receiving fax numbers, any contact name you attach, page counts, delivery status and failure reasons, and related timestamps. Fax documents can contain sensitive information about you or other people, depending on what you choose to send or receive.
2.3 Contacts
If you save contacts, we store the names, companies, fax numbers, phone numbers, email addresses, and notes you enter. These are contacts you provide to FaxBase; the Android app does not request access to your device address book.
2.4 Billing and usage information
We keep your plan, page allowance, page-credit purchases and usage, overage "strike" and recovery records, subscription status, and payment records such as amounts, dates, processor identifiers, refunds, disputes, and payment failures. Payment-card details are entered with and handled by Stripe; FaxBase does not receive or store your full card number or card security code.
2.5 Fax number information
If you subscribe, we provision a dedicated U.S. fax number for you through our telecommunications provider and keep the record of that assignment.
2.6 Notifications and support
We store in-app notifications and records of service emails, including their subjects, bodies, and delivery status. These may include fax numbers, page counts, delivery results, and billing or account details. If you contact support, we process your correspondence and any information you provide.
2.7 Device, usage, and security information
We and our service providers process technical and usage information needed to operate and secure the Service, such as IP addresses, browser and device information, requests, timestamps, and security and audit events. Audit details may include fax numbers, document filenames, page counts, provider references, and account actions. The app stores authentication tokens and session information on your device. FaxBase does not request precise GPS location, microphone, SMS, or call-log access.
2.8 Sensitive information
FaxBase does not ask for sensitive information as such, but the faxes you send and receive may contain it (for example, health, financial, or legal information). You decide what to send. See Section 9 regarding health information.
2.9 Optional usage analytics and advertising measurement
FaxBase includes Google Analytics for Firebase on Android and the web. In versions where analytics is configured, collection is on by default unless you turn it off in Settings → Usage analytics. Versions without analytics configuration do not send Firebase analytics events. Analytics can include app opens and sessions, screens and features used, sign-up steps, checkout and purchase events, document-upload and fax-send outcomes, app version, device and operating-system information, approximate region, and an app-instance identifier. We may associate these events with your internal account identifier; this is pseudonymous information, not a guarantee of anonymity.
Our analytics events do not include fax contents, uploaded documents, document filenames, fax numbers, contact details, names, email addresses, passwords, or authentication tokens. FaxBase does not display ads. The Android app disables advertising-ID collection and ad-personalization signals. Approximate region in analytics may be derived from network information; the app does not collect precise device location for analytics.
Advertising measurement. We advertise FaxBase with Google Ads. If you reach FaxBase by clicking one of our ads, Google may record that click, and on the web Google Analytics may store an ad-click identifier in a cookie. Our Google Analytics account is linked to our Google Ads account so that certain analytics events (account sign-up, starting checkout, purchase, and first fax sent) can be reported to Google Ads as conversions. This tells us which ads lead to customers. These conversion reports contain the same pseudonymous event information described above. They do not include fax contents, documents, fax numbers, contacts, names, or email addresses. We do not use FaxBase information to build advertising audiences or for remarketing, and we have configured our analytics so it is not used for ad personalization. Turning off Settings → Usage analytics also stops these conversion reports from that device or browser. Google describes its handling of this information in How Google uses information from sites or apps that use our services.
3. How We Use Information
We use information to:
- provide, operate, and secure the Service, including transmitting and receiving faxes and assigning your fax number;
- calculate page usage and allowances, process payments, and apply our billing rules;
- send you service notifications such as delivery results, allowance warnings, and billing and account changes;
- prevent fraud, abuse, and unauthorized or unlawful use, and enforce our Terms of Service;
- respond to support requests and diagnose problems;
- understand which sign-up, billing, and faxing steps work or fail, and improve the Service using optional usage analytics;
- measure how well our advertising works, for example whether an ad click led to a sign-up or purchase; and
- comply with legal obligations.
We do not use the contents of your faxes for advertising or profiling, and we do not sell your personal information.
4. How We Disclose Information
We share information only as needed to run the Service:
- Platform provider (Base44). Hosts our application, database, and authentication, and sends our transactional email.
- Telecommunications provider (Telnyx). Transmits and receives faxes and provisions fax numbers, so it processes fax content, fax numbers, and delivery details.
- File storage provider (Cloudflare). Stores your fax documents, and the temporary files used to transmit a fax, in private storage.
- Payment processor (Stripe). Processes payments and subscriptions.
- Sign-in provider (Google). If you choose "Continue with Google," Google authenticates you according to its own privacy policy.
- Usage analytics provider (Google Analytics for Firebase). Where configured and enabled, processes the usage and device information described in Section 2.9 to help us understand and improve the Service. See Google’s Privacy Policy and Firebase privacy information.
- Advertising provider (Google Ads). Receives the ad-click and conversion information described in Section 2.9 so we can measure and improve our ads. It does not receive fax contents, documents, fax numbers, or contact details.
- Authorized administrators and support personnel. May access account, fax, document, and operational information when needed to operate the Service, troubleshoot problems, assist you, or address abuse.
- Fax recipients and telecommunications networks. Sending a fax discloses its contents and the transmitting fax number to the recipient and involves the carriers that deliver it. We cannot delete copies that a recipient has saved or printed. Check the destination number before sending.
- Legal and safety. We may disclose information when required by law or legal process, or to protect the rights, safety, and security of users, the public, or the Service.
- Business transfers. Information may transfer as part of a merger, acquisition, or sale of assets, subject to this Policy.
These providers may process information in the United States and other countries where they operate.
6. Data Retention
Retention depends on the type of information and why it is needed:
- Fax documents: the default retention period is 90 days from when a document is attached to a fax or an incoming fax is received; the current period is shown in Settings. Scheduled processing removes expired documents from our current private storage. Eligible fax deletion or account deletion also requests removal. Storage or service failures can delay completion; contact support if a deletion does not complete.
- Uploads not sent: documents uploaded while composing a fax may remain stored even if you leave the screen without sending. They are included in account deletion; contact support to request removal if they are not available through a fax-deletion control.
- Temporary transmission files and carrier copies: we request removal of temporary merged files when an outgoing fax reaches a final delivery state, and request removal of carrier document copies after processing. Failures can delay removal. Carriers may retain transmission records, including numbers and timestamps, under their own requirements and policies.
- Legacy documents: some documents uploaded before the move to our current storage provider may remain in the former provider’s storage after FaxBase removes access and references. Removing access is not the same as erasing that provider’s copy. Contact us about deletion requests involving older documents.
- Fax history and account records: document expiry does not itself erase fax metadata. Some fax-deletion actions remove the document and hide the fax from your lists while retaining a history record. Contacts, notifications, usage, and billing-rule records generally remain while your account is active and are removed through account deletion, subject to the exceptions below.
- Payment and audit records: retained after account deletion for accounting, fraud prevention, dispute handling, and legal obligations. They may contain internal account and processor identifiers, transaction details, fax numbers, document filenames, timestamps, and operational details. These retained records are not necessarily anonymous. Retention depends on the applicable purpose and obligations; contact us to request access or an assessment of whether particular records can be deleted.
- Analytics, support records, backups, and provider systems: these may have different retention periods from fax documents. Turning off analytics or deleting your FaxBase account does not automatically remove all previously collected analytics data, support correspondence, or provider-held records. Contact us to request deletion. Provider retention settings, backup cycles, and applicable obligations may affect when removal is completed.
7. Security
We use safeguards designed to protect information, including HTTPS for app communications, authentication and account-based access controls, private document storage, short-lived document-access links, and operational logging. Authorized administrators and providers may access information as described above. Fax delivery passes through telecommunications networks and recipients’ equipment; FaxBase does not provide end-to-end encryption of the entire fax transmission. Keep credentials and document-access links private. No system can guarantee complete security.
8. Your Choices and Rights
- Manage contacts and faxes: edit or delete saved contacts. Delete eligible received faxes from Inbox and unsent or failed outgoing faxes from Outbox. A large incoming fax awaiting review must first be accepted or rejected. Delivered outgoing documents remain subject to retention and account deletion.
- Usage analytics: turn off Settings → Usage analytics on each device or browser. This controls optional analytics, including the advertising conversion reports described in Section 2.9, not the operational processing needed to provide the Service. Contact us about previously collected analytics data.
- Delete your account: open Settings → Delete account and confirm, or visit FaxBase account deletion for web access and instructions. If you cannot sign in, email contact@contorta.dev from the address associated with the account. We may need to verify ownership.
- Deletion process: if a fax is still being transmitted, wait for it to finish before retrying, or contact support if it is stuck. Deletion cancels recurring billing and removes your account’s fax, document, contact, notification, usage, credit, strike, and recovery records, subject to Section 6. Your dedicated number is released; carrier failures may delay release. Unused credits are forfeited. If automatic identity removal cannot complete, the request requires follow-up to finish deleting the sign-in identity.
- Service communications: delivery, billing, security, and account notices are part of providing the Service. Optional analytics is not required to use faxing features.
- Privacy rights: depending on applicable law, you may request access, correction, deletion, a copy of your information, or restriction of or objection to certain processing, and may have a right to complain to a data-protection authority. Contact contact@contorta.dev. We may verify your identity and retain information where an applicable obligation or exception permits it. We will not discriminate against you for exercising applicable privacy rights.
9. Health Information
FaxBase does not currently claim to be HIPAA compliant and does not offer a business associate agreement. If you are a covered entity or business associate and need those protections, do not use the Service to send or receive protected health information.
10. Children's Privacy
FaxBase is not directed to children under 18, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.
11. Third-Party Services and Links
The Service relies on the providers described in Section 4. Those providers and external sites have their own privacy notices and practices. Information may be processed in the United States and other countries where these providers operate. This policy describes our handling of information; external sites and fax recipients control their own practices.
12. Changes to This Privacy Policy
We may update this Privacy Policy to reflect product, provider, legal, or operational changes. We will post the revised version with a new "Last updated" date and, where required, provide additional notice before a material change takes effect.
13. Contact Us
For privacy questions, support, or requests, contact:
Contorta Developement LLC
77 W 4800 N Unit A202
Provo, UT 84604
United States