ProntoFax Privacy Policy
Effective date: August 29, 2026
This policy explains what ProntoFax (operated by ShopWatch LLC, a Colorado limited liability company) collects, why, how long we keep it, and who we share it with.
1. What We Collect
Your email address. Used to send your delivery confirmation and receipt link. Your email is encrypted at rest.
Your documents. The PDF you upload or the photos you take. This is the content of your fax, and we treat it as private correspondence: it is used only to render and transmit your fax and to show you your receipt. We do not read, analyze, mine, or use your document contents for any other purpose, including advertising or training.
The destination fax number. Used to validate and transmit your fax, and then kept as part of your delivery record alongside the page count, the time, and the result. We keep it so we can send you a receipt, tell you what happened when a fax does not go through, handle a refund, and check whether a published agency fax number still works. It is kept for as long as the delivery record is kept. Your receipt shows only the last 4 digits.
Delivery metadata. Date and time, page count, delivery status, and language preference. This is your proof of transmission.
Payment information. Handled entirely by Stripe, our payment processor. We receive confirmation that a payment was authorized or captured, but never your card number.
Technical basics. Standard web server information such as IP address and browser type, used for security, fraud prevention, and keeping the service running.
2. What We Don't Do
- We do not sell or rent your personal information.
- We do not use your documents or their contents for advertising, profiling, or model training.
- We do not send marketing email. The only email you get is transactional: the confirmation and receipt for a fax you sent.
- We do not show ads on ProntoFax, and we never share your document, your destination fax number, or your card details with an advertising company.
3. How Long We Keep Things
| Data | Retention |
|---|---|
| Photos you upload | Deleted immediately after processing into your fax document |
| Uploaded PDFs and previews | Deleted within 24 hours |
| Rendered fax document | Deleted 30 days after sending |
| Destination fax number | Kept as part of the delivery record, for as long as that record is kept |
| Delivery record (date, pages, status, destination number) | Retained as your proof of transmission |
| Email address | Retained while needed to provide your receipt, encrypted at rest |
After the 30-day document deletion, your receipt still shows the delivery record, but the document itself is gone and cannot be recovered, by you or by us. If you need a copy of your document, save it before then.
4. Who We Share Data With
We share data only with the service providers required to operate ProntoFax:
- Telnyx: our fax carrier. Receives the destination number and your fax document to perform the transmission.
- Stripe: payment processing. Receives your payment details directly; we never see them.
- Amazon Web Services: hosting and storage. Your documents and our database live in AWS data centers in the United States, encrypted at rest.
- Google: Tag Manager, which loads the measurement tools described in section 8.
- Microsoft: website analytics. Receives page-usage data from our site, as described in section 8.
- OpenAI: advertising measurement. Receives conversion events for faxes that came from our ads, as described in section 8.
Each provider processes data only to provide their service to us. We do not share your information with anyone else, except if required by law (see below).
5. Legal Requests
We may disclose information if required by a valid legal process such as a subpoena or court order, or to protect the safety of any person or the security of the service. Because of our retention design, in most cases the only records that exist after 30 days are delivery metadata, not document contents.
6. Security
- Documents and database contents are encrypted at rest; all connections use TLS in transit.
- Email addresses are encrypted with keys held in a hardware security module.
- Receipt links use unguessable single-fax tokens, and receipts never display the full destination number.
- There are no accounts and no passwords to steal. A fax record is reached only through its own receipt link.
No system is perfectly secure, but our design principle is that the best protection for your data is not keeping it longer than needed.
7. Your Choices and Rights
Access. The receipt link in your confirmation email shows the record of your fax. If you no longer have that link, email support@prontofax.com from the address you used and we will look it up for you.
Deletion. You can request deletion of your personal information by emailing support@prontofax.com. We will delete your email address and any remaining documents. Note that anonymized delivery records and records we must keep for tax, accounting, or legal compliance (such as payment records) may be retained as required.
Colorado and other state privacy laws. Depending on where you live, you may have rights to access, correct, or delete your personal information. We honor reasonable requests from any user regardless of jurisdiction. Email support@prontofax.com and we will respond within 45 days.
Do Not Track. We do not build a profile of you across other websites. The measurement cookies described in section 8 are set on our own site. Browsers do not send a Do Not Track signal in a consistent way, so we do not rely on one. You can block those cookies in your browser or with a tracker blocker instead.
8. Cookies
We use the cookies necessary to run the service, such as completing your payment securely. We also use the measurement cookies below, so we can see which advertising leads to faxes actually being sent and can find problems on the site. None of them contain your document or the destination fax number.
Our attribution cookie (pf_attr). When you arrive from one of our ads or links, we store a first-party cookie named pf_attr on prontofax.com and its subdomains. It records how you got here: the source, the campaign, and any click identifier that was in the link. We read it once, when you start a fax, and save those values with that transaction so we can tell which advertising produces real faxes. It expires 30 days after your first visit, it is never sent to another company, and it holds only those campaign values, not your name, email, or document.
Microsoft Clarity. We use Microsoft Clarity to understand how our pages are used, through heatmaps and recordings of on-page activity such as clicks, scrolling, and mouse movement. It is loaded through Google Tag Manager and sets its own cookies. We use it to find layout and usability problems, not to identify you. Microsoft handles the data it collects under Microsoft's privacy statement.
OpenAI Ads measurement. We advertise through OpenAI, and its measurement pixel is loaded through Google Tag Manager on all pages of prontofax.com. It sets first-party cookies so OpenAI can tell whether someone who arrived from one of our ads went on to send a fax. When a fax is paid for, we send OpenAI a conversion event with the amount charged, the currency, and our internal transaction id for that fax. Hashed contact information, such as a one-way hash of your email address, may also be included so the conversion can be matched to the ad that produced it. A hash cannot be turned back into your address, and we never send OpenAI your document, your destination fax number, or your card details. OpenAI handles the data it receives under OpenAI's privacy policy.
You can block or delete these cookies in your browser, or use a tracker blocker. Sending a fax works either way. Blocking them only means we cannot tell which advertising brought you here.
9. Children
ProntoFax may not be used by anyone under 13, and we do not knowingly collect information from children under 13. Users between 13 and 17 may use the service only with a parent or guardian's consent, as described in our Terms of Service. If you believe a child under 13 has provided us personal information, contact us at support@prontofax.com and we will delete it.
10. Where Data Is Processed
ProntoFax operates in the United States and currently sends faxes only to United States destinations. Your data is processed and stored in the United States.
11. Assistant Integrations (Claude and ChatGPT)
We publish a Model Context Protocol server that lets an assistant such as Claude or ChatGPT look up a verified agency fax number and hand you a link to our send flow.
What the server receives: only the arguments the assistant passes to a tool, which are the agency you asked about, a city or state, and a fax number when you provide one. We do not receive your conversation with the assistant.
What it never receives: your documents and your card details. Uploading and payment happen on our own site, and nothing you upload is returned to the assistant or to the model.
What we log: which tool ran, which assistant called it, which agency matched, and whether it found a number. We do not store the text you typed.
The server requires no account and no sign-in, so it holds nothing that identifies you. If you go on to send a fax, that fax is covered by the rest of this policy exactly as any other send is.
12. Changes to This Policy
We may update this policy from time to time. The effective date at the top reflects the latest revision, and material changes will be posted on prontofax.com.
This policy is written in English. Translations may be provided for convenience; the English version controls.
13. Contact
ShopWatch LLC d/b/a ProntoFax
support@prontofax.com
Questions about this policy or your data: support@prontofax.com
ShopWatch LLC's mailing address is available upon written request to legal@prontofax.com.