Privacy Policy

Oh Fax (ohfax.com / app.ohfax.com). Effective: September 18, 2026. Contact: support@ohfax.com.

What we do

Oh Fax sends outbound faxes to United States and Canada numbers on your behalf (browser, API, CLI, or MCP/agent). We are not a HIPAA-covered entity and are not intended for protected health information (PHI).

Information we collect

Fax job data: destination number, page count, timestamps, delivery status, content hash, and payment references needed to send and receipt a fax.
Document files: PDF bytes you upload or provide for transmission.
Account data (optional): if you sign in (e.g. Google) for prepaid API use — email, account id, balance/ledger metadata, API key hashes (not plaintext keys after creation).
Payment data: processed by Stripe (and related payment rails such as MPP). We do not store full card numbers.
Technical logs: IP, user agent, and request metadata for security, abuse prevention, and reliability.

How we use it

To provide the service (quote, pay, transmit, receipt, refunds), prevent fraud/abuse, comply with law, and improve reliability. We do not sell personal information.

Retention

Document bytes are deleted after a fax reaches a final state (typically within about 24 hours).
Transaction metadata (destination, pages, timing, status, content hash, payment ids) may be retained for support, accounting, and dispute handling.
Account/ledger records are retained while the account exists and as needed for legal/financial records.

Sharing

We use processors such as Cloudflare (hosting), Stripe (payments), and Telnyx (fax transmission). They receive only what is needed to perform their function. We may disclose information if required by law.

Agents / MCP

If you use Oh Fax through an agent or MCP client, the same rules apply to documents and destinations that agent submits.

Your choices

Contact support@ohfax.com to ask about access or deletion of account-associated data, subject to legal retention needs. For cookie/analytics: Cloudflare Web Analytics may collect privacy-oriented traffic metrics.

Changes

We may update this policy; the effective date above will change. Continued use means you accept the updated policy.