Privacy Policy

What we collect

• Account details: your email address, the name your faxes carry, your fax number if you have a plan, and your settings.
• Sign-in and security: sign-in codes, your second sign-in factor if you add one, and records of your sign-ins.
• Documents and faxes: the files you upload, your cover pages, the faxes you send, and the faxes sent to your number. They can hold any information, including Social Security numbers, other government ID numbers, financial account numbers, and health and tax information, about you or about other people.
• Fax records: for each fax, the numbers, the date and time, the pages, the status and the delivery result.
• Orders and payments: what you bought, when and at what price, the terms and prices it was placed under, and payment details from our payment processor, such as whether a payment went through. Our payment processor collects your card details.
• Messages: what you write to us, and our replies.
• Device and usage data: your IP address, your device and browser, the pages you visit, what you click or tap, how you scroll and move the pointer, and the page or ad that brought you. We and our partners collect it with cookies and similar tools.
• Advertising data: what you do after you see or click a XipFax ad, such as signing up or buying, with the purchase’s value, and a hashed (scrambled) copy of your email address that matches a purchase to an ad.
• Your choices: what you consented to or opted out of, and when.

We collect it from you, from people who send faxes to your number, from your device, and from our service providers.

How we use it

• To provide XipFax: run your account, send your faxes, receive faxes at your number and deliver them to your account and email, and keep your fax log.
• To take payments, send receipts, and keep each order’s terms and prices.
• To answer you, and to act on requests, complaints and appeals.
• To keep XipFax secure, and to prevent fraud, abuse and unlawful faxes.
• To meet legal duties, and to make or defend legal claims.
• To measure and improve XipFax and our site.
• To advertise XipFax, including targeted advertising.
• To send you service emails, and marketing emails you can unsubscribe from.

Who we share it with

• The numbers you fax: each fax goes to the number you choose.
• Service providers: that work for us: hosting and storage, our fax carrier, email delivery, payment processing and analytics.
• Advertising and analytics partners: Google and Microsoft. See below.
• Professional advisers: such as lawyers and accountants.
• Authorities and others: when the law requires it, or to protect our rights, safety or property, or those of our clients or others.
• A buyer, successor or affiliate: if all or part of our business or XipFax is sold, merged, reorganized or transferred, including to a company that controls, is controlled by or is under common control with us.
• Anyone else: when you ask us to.

Advertising, analytics and your choices

Our pages carry tags from Google and Microsoft, including the pages that find where to fax a form to a government office. Through these tags, Google and Microsoft collect device and usage data and advertising data. That includes the pages you visit, which can show the form or office you looked up. When you sign up or buy, it includes that action, its value and a hashed copy of your email address. Google and Microsoft can collect information about your online activities over time and across different websites when you use XipFax.

We use this to measure our ads and our site. Heatmaps and recordings of clicks, taps, scrolling and pointer movement show us how visitors use our pages. We also use it for targeted advertising: showing XipFax ads on other sites and apps to people who visited ours.

We do not sell personal information for money. Some state laws may count our partners’ collection as a “sale”. If so, what is sold is the device and usage data and the advertising data above, and the third parties are Google and Microsoft.

To opt out of targeted advertising and of any sale, use the “Opt out of targeted ads” link at the bottom of our pages, or email support@xipfax.com. An agent you authorize can opt out for you. For Nevada residents, support@xipfax.com is our designated address for requests not to sell personal information.

Do Not Track. We treat a Global Privacy Control signal from your browser as a request to opt out of targeted advertising and of any sale, where the law gives it that effect. We do not respond to other Do Not Track signals.

Your rights and requests

Depending on where you live, the law may give you rights over your personal information. They can include the right to confirm whether we process it, to see it, to correct it, to delete it, to get a copy, to learn which third parties we have sold it to, to opt out, and to withdraw a consent.

To use these rights, or to review or change your information, email support@xipfax.com. You don’t need a XipFax account. If you have one, write from its email address; otherwise we may ask for information to confirm who you are. You can also see and download your faxes in your account.

To delete your account, with its documents and faxes, email support@xipfax.com from your account’s email address. We then delete them. We keep only records we must keep or need for a legal reason, such as order and payment records.

If we decline a request, you can appeal. Reply to our answer, or email support@xipfax.com with “Appeal” in the subject. If we deny your appeal, we tell you how to contact your state’s attorney general.

Social Security numbers

Documents and faxes can hold Social Security numbers. We protect their confidentiality, prohibit their unlawful disclosure, and limit who can access them.

Health information

Health information in documents and faxes is subject to electronic disclosure. XipFax sends each fax electronically to the number you choose, and delivers the faxes sent to your number to your account and email. You authorize each fax you send when you send it.

Washington residents: see our Consumer Health Data Privacy Policy.

AI training

We do not collect, use or sell personal information to train large language models.

How long we keep it

We keep personal information, documents and faxes included, for as long as we have a business or legal reason to. Such reasons include providing XipFax, keeping your fax log, meeting legal duties and resolving disputes.

Changes to this policy

When we change this policy, we post the new version here with its date. If a material change affects information we already hold, we tell the clients affected by email or in XipFax, and give them a chance to withdraw their consent before it applies.

Contact

Questions, requests and complaints: support@xipfax.com.