Privacy policy

Version October 2026 · English convenience translation – the German version is legally binding.

Controller

PIT Webservices GmbH, Richard-Wagner-Gasse 16, 2301 Groß-Enzersdorf, Austria · support@mcpfax.de

Data we process

Account data (company, contact, e-mail, address, VAT ID, sender ID, hashed password), fax data (recipient number, document, pages, status), payment data (processed by Stripe) and technical logs (IP address, timestamp, access channel).

Purposes and legal bases

Contract performance (Art. 6(1)(b) GDPR), legal obligations such as bookkeeping (Art. 6(1)(c)), security and abuse prevention (Art. 6(1)(f)).

Recipients

simple-fax.de (fax carrier, Germany, processor), Stripe Payments Europe Ltd. (Ireland), EU hosting provider, and of course the fax recipient. When you connect an AI assistant (e.g. Claude, ChatGPT), its provider processes your inputs under its own terms.

Data flow with AI assistants

AI assistant (e.g. Claude, ChatGPT) → mcpfax server (TLS, OAuth token or API key) → simple-fax.de (TLS) → telephone network → recipient fax machine. mcpfax only receives what is needed for sending: fax number, document and optionally recipient name, subject and cover note. Your credentials are never sent through the chat; sign-in happens only on mcpfax.de.

Logging

Technical logs contain timestamp, request ID, account ID, fax ID, result and error code. Fax numbers are masked in logs (e.g. +4312****78); document contents are never logged.

Retention

Fax documents: 30 days. Fax metadata and invoices: 7 years. Logs: max. 90 days.

Cookies

Only technically necessary cookies (session, language) and no external fonts. Only if you explicitly consent in the cookie notice do we use Google Ads conversion tracking (Google Ireland Ltd.) to measure our advertising (Art. 6(1)(a) GDPR). You can withdraw consent at any time by deleting the cookie "mcpfax_consent".

Your rights

Access, rectification, erasure, restriction, portability, objection – contact support@mcpfax.de. You may lodge a complaint with the Austrian Data Protection Authority (dsb.gv.at).