Faxstax is a send-only iPhone fax app from Southwest Blueprints, LLC. Customer sending is available in the United States. This policy describes the app and the service it connects to.

The short version

No advertising, analytics or tracking SDKs, sale of data, or named-account signup. This is not an offline-only or no-data-collection app. Sending requires processing through our Cloudflare-hosted backend, Telnyx and the recipient.

On your iPhone

Import, scanning, cover-page creation, page edits and drawn signatures happen locally. Signatures are visual marks, not certificate-backed digital signatures; editing can invalidate an existing digital signature. A signature is not saved as a reusable template or uploaded separately, but becomes part of the document if you confirm a send.

Working copies use iOS file protection and are excluded from automatic device backup. They are removed on explicit discard or final submission cleanup. Abandoned copies become eligible for cleanup on the next app use after 24 hours, not at a guaranteed background deadline. Your original in Files or Photos is unchanged.

Local history contains status, page counts, times, references and the last four destination digits, not a document archive. Optional app locking uses Apple's authentication screen; we do not receive your biometric data or device passcode.

When you send

After you confirm, we process the PDF, complete fax destination and transmission metadata to deliver the fax, report status, prevent duplicate sends and handle failures. Cloudflare hosts our API, database and temporary documents. Telnyx processes the document and fax numbers for delivery. The destination recipient receives and controls its copy.

The backend uses short-lived signed document-access grants, currently 15 minutes, with a capped number of reads. Temporary server PDFs are removed after terminal finalization or grant expiry by cleanup processes, including an hourly sweep. Outages can delay deletion. We request Telnyx's optional media and preview storage off; this is not a promise that the carrier retains no processing copies, metadata, logs or backups.

The full destination is encrypted while needed for an unsubmitted job and cleared during submission/finalization/expiry handling. Keyed destination hashes and document/request fingerprints remain in delivery and deduplication records. Fax delivery is not end-to-end encrypted, and we cannot erase recipient copies.

Wallet and Apple purchases

A random wallet credential authenticates a page balance without a named account. It is stored in iPhone Keychain and may synchronize through iCloud Keychain under your Apple settings. The server stores its hash, not a password you choose. Optional recovery files contain your credential and local history, encrypted with your passphrase. We cannot recover a lost passphrase; losing the credential can make remaining pages unrecoverable.

Apple processes payments. We receive and verify purchase identifiers, product, time, app-account token and entitlement/refund state, not your payment-card details. We use a keyed Apple app-transaction identifier to associate trial eligibility, unlocks and refund adjustments across wallets for that Apple identity. An identifier alone cannot recover another wallet's consumable balance. Sandbox/TestFlight purchases and records are isolated from the public service.

Retention and security

Wallet balances, purchase/revocation records, delivery references and anti-replay records are retained as needed to honor non-expiring paid pages, reconcile purchases, prevent duplicate credit or fraud, resolve disputes and meet legal obligations. They do not have the temporary PDF's deletion deadline. Deleting local history does not delete these server records, cancel a fax, or erase carrier or recipient copies.

Short-lived abuse counters use keyed, day-scoped network identifiers rather than advertising analytics. Expired counters are eligible for scheduled cleanup after two days. Infrastructure providers also process connection information such as IP addresses. Worker application logging is disabled in the launch configuration, but provider security, operational, billing and backup retention still applies. Providers may process information where they operate. We do not promise zero retention or deletion from every backup immediately.

Your choices and requests

You choose the document and recipient and review the PDF before confirming. Keep recovery files private and separate from their passphrases. You can discard a draft or delete local history in the app. For privacy, access or deletion requests, contact info@southwestblueprints.com. We may need proof of control of the wallet and may retain records needed for unused balances, fraud prevention or legal obligations. We cannot delete information held independently by a recipient.

Do not use Faxstax for medical records requiring HIPAA compliance, emergencies or time-critical delivery. We make no HIPAA-compliance claim. The app is not directed at children. If this policy changes, we will update this page and its effective date.

See also the Faxstax terms and app information.