Legal information and privacy notice

captainfax.com is published by Dim Solution, a French-registered company with SIRET number 824 358 741 00018 and its registered office at 73 rue Victor Hugo, 77340 Pontault-Combault, France. It offers its online fax service under the name CaptainFax. The company is not based in the United States.

The publication director is Dimitri Do Bairro. To reach the publisher, use contact@captainfax.com or the contact page. These details also appear in the table above.

The website and the sending platform run on servers in data centers located in the European Union, operated on behalf of Dim Solution. The faxes then travel over telecommunications carriers' networks to the recipient's line in the destination country.

Dim Solution is the data controller for personal data processed through captainfax.com, in the sense of the GDPR and of France's Data Protection Act. Since the service is run from France, EU rules govern how we handle your data, including if you are in the United States. We apply the same standard to everyone.

Our approach is simple: we ask only for what a fax needs, we open no accounts, we do not profile visitors, and we do not sell or rent data. Questions about your data go to contact@captainfax.com.

Your data is processed in the EU and may be transferred to the US only through the payment provider, under the safeguards named in Section 7.

• The send form: your name and e-mail address, the recipient's name, the subject of the fax, the destination country and the fax number. The name, recipient and subject also appear on the cover page of the transmission.
• The document: the file you upload, under its original name, plus the PDF produced from it.
• Tracking records: the transmission number, the times it was created and confirmed, and the status and result code of the call.
• Network data: the IP address of the device the request came from.
• Messages: anything you write to us.
• Payment information, where applicable: the amount, status and date, the Stripe reference, and the time you accepted immediate performance and gave up withdrawal. Card numbers are typed into Stripe and do not reach us.

• Sending the fax, issuing the confirmation and tracking e-mails and, when ordered, the PDF receipts: carrying out the contract that is formed once the form is submitted (point (b) of Article 6(1) of the GDPR).
• Collecting payments and issuing refunds that are owed: carrying out the contract.
• Accounting records: a legal requirement (Art. 6(1)(c)).
• Guarding against abuse such as fax spam, automated sending or card fraud, and being able to show what took place in a dispute: our legitimate interest (Art. 6(1)(f)), kept proportionate through brief retention periods.
• Replying to what you send us: legitimate interest or, if you ask about a transmission, carrying out the contract.

Nothing is used for advertising, profiling or automated decisions. We never sell personal information, and we don’t share it for cross-context behavioral advertising.

• The document is erased automatically as soon as the transmission is over. A paid document you never confirm is never sent.
• Form, tracking and IP data are retained for twelve months after the send, for handling complaints and abuse, after which they are erased.
• Payment records stay on file for ten years, the period French commercial law prescribes for bookkeeping.
• Correspondence with us is retained while your request is being handled, then deleted once three years have passed since we last corresponded.

We rely only on providers without which the service could not operate. Each is contractually bound to handle data strictly as we instruct.

• Stripe, a company based in Ireland (Stripe Payments Europe Ltd), takes care of card payments. Certain data may be passed to Stripe, Inc. in the United States relying on standard contractual clauses and the EU–US Data Privacy Framework.
• Brevo, a French company (Sendinblue SAS), delivers our transactional e-mails, and for that purpose it gets your address together with the message content.
• Our hosting provider, located in the European Union, stores the data listed above.
• Telecommunications carriers carry the dialed number and the fax pages, as any transmission over the phone network requires.

Naturally, the recipient gets your fax. Beyond that we disclose nothing, except where a competent authority lawfully demands it.

Under the GDPR you can request access to your data, correction, erasure, restriction of processing and portability, and you can object to processing founded on our legitimate interest. We offer these rights to everyone, residents of US states with their own privacy laws, such as California, included. You can also leave instructions about your data to apply after you die.

Send an e-mail to contact@captainfax.com, preferably stating the e-mail address you used and the transmission number, which is enough for us to trace your records, with no ID needed. We respond within one month. A few records, such as the accounting entries for a payment, can’t be erased early. Exercising a right will never lead us to treat you differently.

If you feel your rights have not been respected, you are entitled to complain to the CNIL, which is the French data protection authority, (website: the CNIL site), and you may equally turn to the supervisory authority where you live or work; US residents can also approach their state attorney general.

CaptainFax uses no analytics tool, no advertising network, no social media widget and no third-party tracker.

• The site may store a few strictly technical settings in your browser, like your language or display preference. These remain on your device.
• When you pay, the Stripe form loads and sets technical cookies of its own to detect fraud, such as __stripe_mid, alongside __stripe_sid. They are required for the payment you asked for, so they need no consent.

We don’t track you from site to site, so a "Do Not Track" or Global Privacy Control signal makes no difference. Cookies and stored data can be deleted whenever you like in your browser settings.

Your document reaches us over HTTPS. Once on our servers, it serves a single purpose, namely preparing and sending the fax. No person reads it, and nothing indexes or archives it, and it is removed once the fax has been sent. The tracking link includes a random identifier nobody could guess.

The last stretch, running from our systems to the recipient's machine, goes over the phone network, where the fax protocol has no encryption. This applies to every fax service. For sensitive material, take that into account and make sure the number is right. Our security guide sets out good practice. If your fax contains regulated information, such as health records, decide whether an unencrypted phone line is acceptable before sending.