FaxCommand Privacy Policy
Operator: UmbraWhite, LLC. Product: FaxCommand.
Contact: inquire@umbrawhite.com. We do not publish a street address.
What we collect
- Account: name, email, password hash, timezone, role, plan/Stripe ids, trial dates
- Team invites and email-change tokens
- Vendor connection credentials (encrypted at rest; decrypted only to poll that vendor)
- Fax usage: counts and fax numbers. Not fax documents, and not other fax metadata
- Group contact fields you enter (name, email, phone, address) if you use advanced group attributes
- Mail we send (verify, daily summary, history request, email-change notice)
We do not want, store, or download fax file payloads. We do not store protected health information (PHI). We do not store fax metadata other than usage (counts) and fax numbers.
Why
Provide the product, authenticate you, poll vendors you connected, send optional reports, bill Enterprise via Stripe, diagnose abuse.
Who else sees it
- Stripe for checkout (no full card numbers on our servers)
- Mailgun for transactional mail
- The fax vendor you connected (we call their API with your credentials)
- Akamai, which hosts our servers
We do not sell personal information or customer lists.
Subprocessors
| Subprocessor | Role |
|---|---|
| Akamai | Servers |
| Mailgun |
Cookies
We do not use cookies other than session cookies required to keep you signed in. We do not use analytics cookies, and we do not run analytics.
Email change
If you change email, we notify the old address. If that wasn’t you, write inquire@umbrawhite.com.
Retention
While the account is open, we keep the data needed to run the service. We delete your data 72 hours after cancellation so you can reinstate the account during that window. The same 72-hour deletion applies after we terminate the account. Vendor logs follow the vendor’s retention, not ours. Backfill cannot exceed what the vendor still has. Deleting our copy does not change the vendor’s archive.
Security
TLS in transit. The database is completely encrypted and secure. No fax documents on disk.
Your rights
Access, correct, or delete account data by asking inquire@umbrawhite.com (or in-product where it exists).
Not offered in the EU
FaxCommand is offered in the United States. We do not offer the service to residents of the European Union, the European Economic Area, or the United Kingdom, and we do not apply the GDPR.
California privacy rights (CCPA / CPRA)
This section applies if you are a California resident.
Categories we collect. Identifiers (name, email, account id), commercial information (plan, billing status, trial dates), customer records you enter for groups, and internet activity limited to operating your signed-in session. We use these categories for the purposes in “Why” above. We retain them as described in “Retention.”
Sale and sharing. We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not use or disclose sensitive personal information for purposes that require a right to limit under the CPRA.
Your requests. You may ask us to:
- Know the categories and specific pieces of personal information we collected about you
- Delete personal information we hold, subject to legal exceptions
- Correct inaccurate personal information
- Opt out of sale or sharing (we do not sell or share, so there is nothing to opt out of)
- Not receive discriminatory treatment for exercising these rights
Email inquire@umbrawhite.com. We verify the request with the email on the account. An authorized agent may submit a request with proof that you authorized them. We respond within 45 days. If we need more time, we will tell you why and may take up to another 45 days.
Contact
UmbraWhite, LLC
inquire@umbrawhite.com