Edwyna Privacy Policy

Effective date: August 13, 2026
Operator: Savetz Publishing, Inc. ("Savetz," "we," "us," or "our")
Contact: support@edwyna.com

This Privacy Policy explains how Savetz collects, uses, discloses, and retains information in connection with Edwyna.com, Edwyna account pages, and the Edwyna fax application programming interface (collectively, "Edwyna" or the "Service"). It applies to account holders, people who operate software or artificial-intelligence agents through an account, and other people whose information is submitted to the Service.

This policy applies only to Edwyna. Other Savetz services, including FaxZero, have separate privacy policies.

1. Information we collect

Account information

We collect the name, email address, telephone number, password hash, email verification status, account status, and security and support history of an account holder. We do not store the account holder's plaintext password.

API and security information

We collect API-key display prefixes, one-way API-key hashes, permissions, spending and sending limits, creation and revocation dates, and API usage. We also collect account-session records, authentication events, security events, and administrator actions. Verification and password-reset secrets are stored as one-way hashes.

We collect IP addresses and standard server, security, and transaction logs in the ordinary course of operating our business and providing the Service. We use this information to operate and secure the Service, prevent fraud and abuse, provide support, resolve disputes, comply with law, and respond to valid legal process.

Fax information and content

To provide the Service, we collect information supplied by the account holder or its authorized software, including:

• sender and recipient names, companies, email addresses, telephone numbers, and fax numbers;
• the PDF submitted for transmission and its filename, size, page count, and cryptographic fingerprint;
• customer references, API-key identity, price, timestamps, delivery status, failure information, and provider transmission identifiers; and
• records of status changes, delivery attempts, and account credits associated with a fax.

Fax documents may contain personal, confidential, health-related, financial, or other sensitive information selected by the account holder. The account holder is responsible for having authority to submit and transmit that information and for selecting the correct recipient.

Payment information

Payments are processed by Stripe. Stripe collects payment-card and other payment information under its own terms and privacy policy. Edwyna receives transaction identifiers, payment status, amount, currency, receipt email, refund or dispute information, and limited payment-related metadata. Edwyna does not receive or store complete card numbers or card security codes.

Communications

We collect information contained in account-verification messages, password recovery, support requests, complaints, legal requests, and other communications with us.

2. How we use information

We use information to:

• create, verify, secure, and support accounts;
• authenticate account holders and authorized API clients;
• validate, price, transmit, monitor, and report fax jobs;
• process prepaid funding and maintain an immutable balance ledger;
• apply sending, spending, destination, and security limits;
• restore Edwyna credit for eligible failed faxes;
• detect and prevent fraud, abuse, junk faxing, security incidents, and violations of our Terms of Use;
• investigate complaints and comply with legal obligations;
• maintain, troubleshoot, and improve the Service; and
• communicate about transactions, security, support, and material policy or Service changes.

We do not use fax content to train artificial-intelligence models.

3. How information is disclosed

We disclose information only as reasonably necessary for the following purposes:

• Fax transmission. Fax content and sender and recipient information are provided to backend fax provider(s), telecommunications networks, and the intended recipient. People or systems at the recipient's location may also have access to a delivered fax.
• Payment processing. Payment and account information is provided to Stripe as necessary to process funding, receipts, refunds where legally required, disputes, and fraud prevention.
• Service providers. Hosting, backup, email-delivery, monitoring, security, and support providers may process information only to perform services for us.
• Legal and safety purposes. We may preserve, use, or disclose information when we reasonably believe it is necessary to comply with law or valid legal process; protect a person from harm; enforce our agreements; investigate fraud, abuse, or unlawful faxing; or protect the rights, security, and property of Savetz, our users, or others.
• Business transfer. Information may be transferred in connection with a merger, financing, reorganization, sale of assets, or similar transaction, subject to applicable law.

We do not sell personal information. We do not disclose personal information for cross-context behavioral advertising and do not place third-party advertising trackers on Edwyna.

4. Cookies

Edwyna uses only cookies necessary for account and administrator sessions, form security, and payment-return continuity. Edwyna does not currently use advertising cookies or third-party analytics cookies. Disabling necessary cookies may prevent account pages from working.

5. Retention

Retention periods depend on the type of information and why it is needed:

• Fax PDFs are ordinarily removed from Edwyna's active document storage within 72 hours after upload. Backend fax provider(s) may process and temporarily retain fax content as necessary to transmit and report the fax.
• Payment records, immutable balance-ledger entries, administrator adjustments, fraud and dispute records, and acceptance of legal terms may be retained for at least seven years or longer when required by law or an unresolved matter.
• Account information is retained while the account is open and afterward as reasonably necessary for security, support, dispute resolution, enforcement, and legal compliance.
• Savetz keeps long-term backups. Information deleted from active systems may remain in access-restricted backups indefinitely. Backup information is not ordinarily accessed or restored except for disaster recovery, security, legal compliance, or integrity verification.

We may preserve particular information for longer when required by law, valid legal process, a litigation hold, fraud prevention, dispute resolution, or the protection of users or the Service.

Except where a specific period is stated, we retain information for as long as reasonably necessary for the purposes described in this Policy. Retention periods vary based on the type of information and our operational, business, security, and legal needs.

6. Health information and HIPAA

Edwyna may be used to transmit health-related documents, but Edwyna is not currently represented or warranted to be compliant with the Health Insurance Portability and Accountability Act (HIPAA), and Savetz does not currently enter into business associate agreements for Edwyna. An organization subject to HIPAA is responsible for determining whether its use requires a business associate agreement and must not use Edwyna in circumstances where such an agreement with Savetz is legally required unless Savetz separately agrees to one in writing.

7. Security

We use administrative, technical, and physical safeguards designed to protect information, including access controls, encrypted network transport, one-way storage of passwords and API secrets, narrowly scoped API keys, authentication throttles, document validation, audit records, and restricted administrator access. No system or method of transmission is completely secure, and we cannot guarantee absolute security.

Account holders are responsible for protecting passwords and API keys, limiting agent permissions, revoking credentials that may be compromised, and using the Service only from systems they trust.

8. Choices and requests

You may contact support@edwyna.com to request access to, correction of, or deletion of your account information. We may need to verify your identity. We may deny or limit a request when permitted by law, including when information must be retained for financial records, security, fraud prevention, legal claims, another person's privacy, or other legal obligations.

Closing an account does not entitle the account holder to a refund of unused Edwyna credit except where required by law.

Residents of some states may have additional privacy rights. We will honor applicable rights and appeal procedures. We do not discriminate against a person for exercising an applicable privacy right.

9. Children's privacy

Edwyna is intended for adults and organizations. It is not directed to children under 18, and a person under 18 may not create an account.

10. United States service

Edwyna is operated from the United States. Information is processed and stored in the United States and may be subject to United States law.

11. Changes to this policy

We may update this policy prospectively. We will post the updated version and effective date. We will provide reasonable advance notice through the Service or by email before a material change takes effect. A change will not apply retroactively unless required by law or expressly agreed.

12. Contact

Questions or privacy requests may be sent to:

Savetz Publishing, Inc.
PO Box 66
West Linn, OR 97068-0066
USA
Email: support@edwyna.com