Burofax.onmax.me

Legal

Privacy policy

What data we process to send your burofax, why, who we share it with and how to exercise your rights under the GDPR.

Last reviewed:

Controller

Owner
[TITULAR]
Tax ID (NIF)
[NIF]
Address
[DOMICILIO]
Email
burofax@onmax.me
Website
burofax.onmax.me

What we process

  • Your details as sender: name, postal address, email and, only if the operator requires it, an ID number that we ask for on the payment page, never in the chat.
  • The recipient’s details: name or company name and postal address.
  • The content of the letter you send or paste.
  • Payment data: handled by Stripe. We never see or store your card number.
  • Technical and usage data: IP address, browser and pages visited, to keep the service secure and to measure use in aggregate.

Why, and on what basis

  • Preparing, sending and tracking your letter: performance of a contract (GDPR art. 6(1)(b)).
  • Invoicing, accounting and tax: legal obligation (art. 6(1)(c)).
  • Security, fraud prevention and usage analytics: legitimate interest (art. 6(1)(f)).
  • The recipient’s details: the sender’s legitimate interest in giving formal notice (art. 6(1)(f)). The recipient learns of it on delivery.

Who we share it with

Only the providers we need to run the service:

  • Cloudflare: hosting, database and document storage.
  • Stripe: card payments.
  • Correos or Notificados, depending on the option you choose: they admit, deliver and certify the letter, so they receive the sender’s and recipient’s details and the document.
  • PostHog: website usage analytics.

If you draft the letter in ChatGPT, OpenAI processes your conversation under its own privacy policy. We only receive the draft you choose to send us.

Some of these providers may process data outside the European Economic Area. Where they do, they rely on appropriate safeguards such as the European Commission’s standard contractual clauses or the EU-US Data Privacy Framework.

How long we keep it

  • Drafts you never pay for: deleted after 30 days.
  • Paid letters: the document and the proofs, for as long as you may need them as evidence and at most six years, for accounting obligations. You can ask us to delete the document sooner.
  • Usage data: aggregated or pseudonymised, for at most 12 months.

Cookies

We only use strictly necessary cookies, for example to remember that you dismissed the language suggestion. If we ever add non-essential cookies, we will ask for your consent first.

Your rights

You can ask for access, correction, deletion, restriction or portability of your data, or object to its processing, by writing to burofax@onmax.me. You can also complain to the Spanish data protection authority (aepd.es) or the one where you live.