Faxoryn privacy policy

This Privacy Policy applies when you visit Faxoryn, create an account, send or receive a fax, contact support, or connect a third-party service. The service is operated by Shenzhen Qorynex Technology Co., Ltd. ("we", "us", or the "Operating Company").

Our published address is Room 509, Block A, Jiada R&D Building, No. 5 Songpingshan Road, Songpingshan Community, Xili Subdistrict, Nanshan District, Shenzhen, Guangdong Province, China. Send privacy questions and requests to dpo@faxoryn.com. This policy is effective from 2026-10-01.

A connected payment, storage, email, authentication, or carrier service has its own privacy notice and terms.

We collect account and security details such as your name, email address, password credentials, role, notification choices, session data, IP address, browser details, and support messages.

A fax record can include sender and recipient numbers, contact details, cover fields, subject or reference, uploaded files, fax pages, status events, timestamps, retries, and team ownership. The documents you submit may contain personal or confidential information.

For billing, we receive transaction, subscription, invoice, and payment-status details from the payment provider. The provider handles your payment-card information.

We use information to authenticate users, manage permissions and fax numbers, prepare and transmit faxes, receive inbound faxes, record delivery status, calculate usage, process billing, send necessary service notices, and respond to support requests.

We also use technical information to prevent abuse, protect accounts, investigate failures, enforce limits, and keep operational records. We do not use fax contents to build an advertising profile.

Legal bases. We process your information only where we have a legal basis for doing so:

Performance of a contract. To create and secure your account, manage permissions and fax numbers, prepare and transmit faxes, receive inbound faxes, record delivery status, calculate usage, and process billing.

Legitimate interests. To prevent abuse, protect accounts, investigate failures, enforce limits, and keep operational records, balanced against your rights and expectations.

Legal obligation. To keep billing, transaction, and accounting records that applicable law requires, and to respond to lawful requests.

Consent. For marketing emails you choose to receive. You can withdraw consent at any time through the unsubscribe link or your notification settings; withdrawing consent does not affect the rest of the service.

To deliver a fax, we send the destination, sender details where required, and document data to the telecommunications provider or carrier. Provider events, identifiers, timestamps, and errors are returned to the service.

We use providers for payment, object storage, email, authentication, file preview, integrations you authorize, and telecommunications. Each receives the information needed for its service.

We may disclose information when required by law or a valid legal process, or when necessary to protect users, the Operating Company, providers, or the public. Information may transfer during a merger, acquisition, reorganization, or sale of assets, subject to law.

International transfers. We are based in Shenzhen, China. When you use the service, your information is stored and processed on servers in Singapore and in the countries where our providers operate. We do not transfer your information into mainland China for processing. Where required by law, these transfers rely on appropriate safeguards, such as standard contractual clauses or other lawful transfer mechanisms.

Faxoryn itself stores only what is needed to run the service: a session token that keeps you signed in, and small local-storage entries for things you ask for, such as a list of recipients you have used recently, a sign-in flow preference, or the state of a service connection you are making. This storage is necessary for the features you are using; blocking it can stop sign-in or parts of the workspace from working.

The third parties below may place their own storage on your device only when you use the related feature: Google or Microsoft when you sign in with them, Google reCAPTCHA on our sales and inquiry forms to prevent automated abuse, Paddle while you complete a checkout, and the file pickers for Dropbox, Google Drive, OneDrive, or Box when you open them in the workspace. Their own notices and terms apply to that storage.

Faxoryn does not set advertising cookies, cross-site tracking, or analytics cookies that would require consent. If optional analytics, advertising, or other non-essential browser storage is ever added, this policy and the required consent controls will be updated before those technologies are used.

You can sign out of the workspace, or clear and block browser storage in your browser settings. Blocking storage that a feature requires will stop that feature from working.

We keep account, fax, security, support, and billing records while they are needed for service delivery, disputes, fraud prevention, accounting, legal duties, or security. Deleting a workspace item does not require immediate deletion from backups or legally retained records.

Keep your own archive when your organization has a separate retention duty.

Retention periods. Account and workspace data are deleted or anonymized when they are no longer needed for the purposes described in this policy. Security and fraud-prevention records are kept for a limited period (up to 12 months). Billing and transaction records are kept as long as required by applicable accounting and tax law.

You can update supported account details, contacts, notification settings, connected services, and fax settings in the workspace. Where applicable law gives you additional rights, contact us to request access, correction, deletion, restriction, or information about your personal data.

Send requests to dpo@faxoryn.com. We respond within 30 days of a complete request, or within the period required by the law that applies to you. We may verify your identity and account authority using account-bound information before responding; if we need more time or cannot complete a request, we will explain why and, where applicable, how you can appeal.

Some records must remain while needed for an active service, payment, investigation, dispute, or legal obligation.

If you are in the EEA, the United Kingdom, or Switzerland. If the GDPR or UK GDPR applies to you, you can request access to your personal data, correction of inaccurate data, deletion, restriction of or objection to processing, and data portability. Where we process information based on consent, you can withdraw that consent at any time. You can also lodge a complaint with your local data protection authority. We handle these requests as described above and do not discriminate against you for exercising these rights.

If you are a California resident. The California Consumer Privacy Act gives you the right to know what personal information we collected about you in the preceding 12 months, the right to request deletion, and the right to correct inaccurate personal information. We do not sell or share personal information as those terms are defined by the CCPA, and we do not discriminate against you for exercising your rights.

We use administrative, technical, and organizational safeguards, but no internet, carrier, storage, or email system is guaranteed secure. Protect credentials, review team access, and confirm fax destinations before sending.

We protect information in transit with TLS encryption, encrypt stored data where supported, limit access to personnel who need it to operate the service, and log administrative actions.

The service is not directed to children. We may update this policy when the service, providers, or legal requirements change. The version posted here and its effective date control.