Legal notice and privacy

captainfax.com is published by Dim Solution, a company registered in France under SIRET number 824 358 741 00018, with its registered office at 73 rue Victor Hugo, 77340 Pontault-Combault, France. CaptainFax is the name under which it offers its online fax service.

The publication director is Dimitri Do Bairro. Contact the publisher at contact@captainfax.com or via the contact page. The details are also listed in the table above.

The website and the sending platform run on servers hosted in data centres situated within the European Union, operated on behalf of Dim Solution. The faxes themselves then travel over the telecommunications operators' networks to the recipient's line, in the destination country.

For the personal data handled via captainfax.com, Dim Solution acts as controller in the sense of the GDPR and of France's Data Protection Act. This applies to you wherever you are: the service is run from France, so EU rules govern how we handle your data.

Our approach is simple: we ask only for what a fax needs, we open no accounts, we do not profile visitors, and we do not sell or rent data. Questions about your data go to contact@captainfax.com.

• The send form: your name and e-mail address, the recipient's name, the subject of the fax, the destination country and the fax number — the name, recipient and subject also appear on the cover page of the transmission.
• The document: the file you upload, under its original name, together with the PDF produced from it.
• Tracking records: the transmission number, when it was created and confirmed, its status and the result code of the call.
• Network data: which IP address sent the request.
• Payment, when there is one: amount, status, date, Stripe reference, and the moment you accepted immediate performance and waived withdrawal. Card numbers are entered in Stripe and are never seen by us.
• Messages: whatever you write to us.

• Transmitting the fax, sending the confirmation and tracking e-mails and, if ordered, the PDF receipts: this performs the contract concluded when you submit the form, a basis set by Art. 6(1)(b) of the GDPR.
• Taking payment and refunding when due: necessary to perform the contract.
• Accounting records: Art. 6(1)(c) imposes a legal obligation.
• Fighting abuse such as fax spam, automated sending or card fraud, and being able to show what happened in a dispute: our legitimate interest (Art. 6(1)(f)), kept in proportion by short retention periods.
• Replying to your messages: our legitimate interest or, when you ask about a transmission, performance of the contract.

Nothing is used for advertising, profiling or automated decisions.

• The document is deleted automatically once the transmission has ended. A paid document you never confirm is never sent.
• Form, tracking and IP data are kept for twelve months after the send, to deal with complaints and abuse, and then deleted.
• Payment records are kept for ten years, the period French commercial law sets for bookkeeping.
• Correspondence with us is kept while we handle your request, then deleted no later than three years after our last exchange.

We use only the providers the service cannot run without. Each is bound by contract to process data on our instructions only.

• Card payments are handled by Stripe (operated in Ireland by Stripe Payments Europe Ltd). Certain data can travel to Stripe, Inc., its American parent company, under standard contractual clauses and the EU–US Data Privacy Framework.
• Our transactional e-mails go through Brevo (Sendinblue SAS, France), which therefore receives your address and the e-mail content.
• Our hosting provider stores the data listed above, on servers in the European Union.
• Telecommunications operators carry the number dialled and the pages of the fax, as every transmission over the phone network requires.

The recipient naturally receives your fax. Beyond that we disclose nothing, unless a competent authority lawfully requires it.

Under the GDPR you may ask for access to your data, correction, erasure, restriction of processing and portability, and you may object whenever we rely on our legitimate interest to process it. You may further give directions about your data after your death.

Send your request to contact@captainfax.com, ideally quoting the e-mail address you used and the transmission number, so that we can find your data without asking for identity documents. We answer within one month. Some records, such as accounting entries for a payment, cannot be erased early.

If you think your rights have been disregarded, you may complain to the CNIL, the French data protection authority (www.cnil.fr), or to the supervisory authority of the country where you live or work.

CaptainFax has no analytics tool, no advertising network, no social-media widget and no third-party tracker.

• The site may keep a few purely technical settings in your browser, such as your language or display preference. They stay on your device.
• When you pay, the Stripe form loads and sets technical cookies of its own to detect fraud, such as __stripe_mid, alongside __stripe_sid. They are necessary for the payment you requested and so do not need your consent.

You can delete cookies and stored data at any time in your browser settings.

Your document travels to us over HTTPS. On our servers it serves only to assemble and send the fax; nobody reads it, nothing is indexed or archived, and it is erased once the fax has gone. The tracking link contains a random identifier nobody could guess.

The last stretch, from our systems to the recipient's machine, uses the telephone network, where the fax protocol has no encryption. That is true of every fax service. For sensitive material, take it into account and check that the number is the right one. Our security guide describes good practice.