Privacy Policy

Scope

Notera Labs Limited is responsible for the personal information described in this Policy. It covers noteralabs.com, our Fax Prime: Send & Receive app, and our other products and related services.

This Policy also covers messages you send to us for support or privacy requests. Websites, app stores, and other services reached through our links may process information under their own privacy policies. We do not sell personal information or use fax content to build advertising profiles.

Information we collect

• Usage and technical information: information about how you use our website, apps, services, and advertisements, and technical information needed to operate and protect them.
• Fax content: documents, images, cover page text, attachments, sender details, recipient details, fax numbers, and inbound fax content.
• Fax metadata: transmission status, timestamps, page counts, delivery attempts, error messages, and service logs.
• Contact details you choose to use: recipient names, phone numbers, fax numbers, and support contact details.
• Purchase information: subscription status, product identifiers, transaction identifiers, renewal status, and purchase validation data from Apple or purchase service providers.
• Support information: messages, email address, screenshots, logs, and any other information you send when requesting help.

How we use information and legal bases

We collect information you provide, information generated when you use our services, and information supplied by platforms and service providers. For example, you may enter information in the app, select files or contacts, send a fax, make a purchase, or contact support.

If you grant access to Contacts, Photos, Camera, Files, or similar device features, we use it for the action you request. We do not copy your full address book for our own use. Selected contact details may be used to prepare or send the fax you initiate.

• Requested services: prepare, send, receive, route, store, and display faxes; maintain fax history; and validate purchases and paid access. The legal basis is performance of our contract with you where applicable.
• Support and operations: respond to requests, troubleshoot problems, and maintain reliability. The basis is our contract or our legitimate interest in supporting users and operating the services.
• Security: prevent fraud, spam, abuse, and security incidents. The basis is our legitimate interest in protecting the services and, where applicable, a legal obligation.
• Advertising measurement: assess the effectiveness of our advertising. The basis is our legitimate interests where permitted by law, or consent where required.
• Legal and accounting needs: comply with law, handle lawful requests, resolve disputes, and keep required records. The basis is a legal obligation or our legitimate interest in establishing and defending claims.

Where processing depends on consent, you can withdraw it at any time. Withdrawal does not affect earlier lawful processing or processing with another legal basis. We do not use fax documents or their contents to measure advertising campaigns.

Sharing

We share information only for the purposes described in this Policy or when legally required. The recipients depend on the service you use:

• Fax and telecom providers and recipients: fax content and routing details needed to transmit or receive a fax.
• Hosting, network, cloud, and storage providers: data and logs needed to host, secure, and operate our website, app, and related services.
• Apple and purchase service providers: transaction and entitlement information needed for billing and subscription support.
• Google: information needed to measure the effectiveness of our advertising.
• Diagnostics and support providers: information needed to resolve requests and maintain reliability.
• Authorities or other parties: information when required by law or needed to protect rights, investigate abuse, or handle legal claims.

Our service providers are required to protect the information they process for us and use it only to provide the contracted services.

Retention and deletion

We retain advertising measurement information for one month. Other personal information is kept only as long as needed to provide our services, meet legal obligations, or resolve disputes.

You can request deletion using the contact details below, subject to applicable law.

GDPR and other privacy rights

Depending on where you live and the law that applies, you may request access to your personal information, correction, deletion, restriction of processing, or a portable copy. You may object to processing based on legitimate interests, including direct marketing, and withdraw consent where consent is the basis. These rights are subject to legal conditions and exceptions.

You can also choose not to grant optional app permissions, delete app data where the app provides a deletion tool, and cancel subscriptions through your Apple account. To exercise a privacy right, contact us below. We may need to verify your identity before responding. If the GDPR applies, you may lodge a complaint with a data protection authority where you live, work, or believe an infringement occurred. Under Hong Kong's Personal Data (Privacy) Ordinance, you may request access to or correction of your personal data and lodge a complaint with the Privacy Commissioner for Personal Data, Hong Kong.

California and US state privacy

We do not sell personal information or use fax content for cross-context behavioral advertising. If an applicable US state privacy law gives you rights to access, delete, correct, or obtain a copy of personal information, or to opt out of certain advertising-related disclosures, contact us to exercise those rights. An appeal may be available if we deny a request.

International transfers

Notera Labs Limited is based in Hong Kong. Information may be processed in Hong Kong, the United States, and other countries where our providers operate. Those countries may have different privacy laws. Transfers of personal information from the EEA are subject to applicable GDPR requirements. Contact us for information about the safeguards relevant to a particular transfer.

Security

We use administrative, technical, and organizational safeguards designed to protect information, including restricted access to service data. No app, network, transmission, or storage system can be guaranteed to be perfectly secure, especially when documents are sent through recipient fax systems and telecom networks outside our control.

Sensitive documents and HIPAA

Faxes may contain sensitive, confidential, medical, legal, financial, or regulated information. Fax Prime: Send & Receive is designed to handle documents with privacy and security in mind, while you remain responsible for deciding whether a fax workflow is appropriate for the information you choose to send.

Fax Prime: Send & Receive is built with privacy and security safeguards informed by HIPAA principles, including secure handling, limited access, and service-provider controls. HIPAA obligations depend on who uses the app and for what purpose.

If you are a covered entity or business associate and your use requires a Business Associate Agreement, you must have a separate written agreement with Notera Labs Limited before using the app for workflows involving protected health information.

Children

Our products and services are not directed to children. Fax Prime is not intended for children under 13. If you believe a child provided personal information to us, contact us and we will take appropriate steps to delete it.

Changes

We may update this Policy from time to time. The updated version will be effective when posted unless a different date is stated. If our privacy practices materially change, we will update this Policy and provide other notice where required, including any required App Store privacy information.

Contact

Send privacy questions and requests to Notera Labs Limited. [email protected] +357 99 555 128