Privacy Policy

1. Controller

The controller responsible for processing personal data on this website and within the TruegateX services is:

TruegateX LLC
[Street address], [City, State, ZIP], [Country]
Email: support@truegatex.com

2. What we process and why

2.1 Account data

When you create an account we process your email address, name (optional), phone number (for verification, optional), password hash, and account settings. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

2.2 Documents and transmission data

To deliver your faxes, letters, SMS, RCS messages, and secure links we process the documents you upload and the recipient data you enter (fax numbers, postal addresses, phone numbers, email addresses). Documents are processed exclusively for the purpose of transmission and proof of delivery. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Delivery records (delivery reports, transmission logs, status events) are stored in your account archive so that you can prove a transmission took place. You can delete archived items in your account.

2.3 Payment data

Payments are handled by our payment providers (e.g. Stripe, Apple App Store, Google Play). We do not store full card numbers. We process billing records (amounts, timestamps, invoice data) to fulfil the contract and our statutory retention duties. Legal bases: Art. 6(1)(b) and 6(1)(c) GDPR.

2.4 Log data

When you visit this website or use our apps and API, our servers record technical access data (IP address, timestamp, requested resource, user agent) to operate the service securely, prevent abuse, and diagnose faults. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Log data is deleted or anonymized after [retention period].

2.5 Cookies and local storage

This website does not use tracking cookies. We only store a single entry in your browser's local storage to remember your color-scheme preference (light or dark). No analytics or advertising trackers run on this website.

3. Recipients and processors

To deliver your documents we use carefully selected service providers acting as processors or as independent telecommunications providers, in particular:

• Telecommunications carriers for fax, SMS, and RCS delivery
• Print and postal service providers for letter delivery
• Hosting and infrastructure providers
• Payment providers

Where these providers act as processors, we have concluded data processing agreements in accordance with Art. 28 GDPR. [List the concrete providers used in production here.]

4. International transfers

Where personal data is transferred to countries outside the EU/EEA (for example, because a recipient's fax number is located abroad or a provider operates globally), we ensure appropriate safeguards such as EU standard contractual clauses, or the transfer is necessary for the performance of your sending order (Art. 49(1)(b) GDPR).

5. Retention

We keep personal data only as long as needed for the purposes described above: documents and delivery records until you delete them or your account is closed, billing records for the statutory retention periods, log data for [retention period].

6. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you (Art. 15)
• rectification of inaccurate data (Art. 16)
• erasure (Art. 17) and restriction of processing (Art. 18)
• data portability (Art. 20)
• object to processing based on legitimate interests (Art. 21)
• withdraw consent at any time, where processing is based on consent
• lodge a complaint with a supervisory authority

To exercise your rights, contact us at support@truegatex.com.

7. Security

All transmissions between you and our systems are TLS encrypted. Documents delivered as secure links are released only after the recipient has verified their identity. Access to production systems is restricted and logged.

8. Data processing agreement for business customers

If you use TruegateX to send documents containing personal data of third parties, we act as your processor for this content data. We offer a data processing agreement (DPA) in accordance with Art. 28 GDPR; contact support@truegatex.com to conclude one.

9. Changes to this policy

We update this privacy policy when our services or legal requirements change. The current version is always available on this page.