Privacy Policy

This Privacy Policy explains what personal information Envyrofax collects, how we use and share it, and the choices and rights you have. It applies to envyrofax.com and our related services. Health-related information is also covered by our Consumer Health Data Privacy Policy.

Information we collect

Information you give us

• Account information: name, email address, mobile phone number, street address, city, state or province, postal code and country.
• Sex: male, female, or prefer not to say, used to personalize health context because environmental health risks differ by sex.
• Addresses you scan and properties you save.
• Health conditions you select in the Body Scan. These selections are processed in your browser and are not sent to or stored by us.
• Consents: the date, time, IP address and version of each consent you give (terms, health data, text messages, marketing).
• Messages you send us.

Information collected automatically

• Device and log information such as IP address, browser type, pages viewed, referring URLs and timestamps, used for security, rate limiting and debugging.
• Cookies and similar technologies: a sign-in session cookie, a first-visit animation flag, your privacy opt-out setting, and cookies set by our advertising partners. See Cookies & Ads.

How we use information

• To provide reports, verify your account with two-step codes, and keep your account secure.
• To personalize health context using your sex and address (with your consent).
• To send security codes by email and, if you opt in, by text message.
• To send optional updates about new records near your address, only if you opt in.
• To show advertising that keeps the Service free, and to measure and improve the Service.
• To prevent fraud and abuse, comply with law, and enforce our Terms.

How we share information

We do not sell your name, email, phone number, address or sex. We share information only with:

• Service providers that host our site and database, send email and text messages, and provide security, under contracts that limit their use of the information.
• Advertising partners such as Google, which may use cookies and device identifiers to show and measure ads. Under some state laws this can be a "sale" or "sharing" for targeted advertising; you can opt out on our Do Not Sell or Share page, and we honor Global Privacy Control signals automatically.
• Authorities when required by law or to protect rights and safety, and a successor in a merger or acquisition, subject to this Policy.

Retention

We keep account information while your account is active and for up to 24 months after your last use, unless you ask us to delete it sooner or the law requires longer. Verification codes expire after 15 minutes and are deleted within 30 days. Server logs are kept up to 90 days.

Security

We use encryption in transit, hashed session and verification tokens, two-step verification, access controls and rate limits. No method is perfectly secure, and we will notify you of a breach as required by law.

Your rights and choices

Depending on where you live (including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Florida and other states), you may have the right to know, access, correct, delete and obtain a portable copy of your personal information, to opt out of targeted advertising and sales, and to limit use of sensitive information. You can download or delete your data at any time from your account page, or email hello@envyrofax.com. We will verify requests and respond within 45 days. You may use an authorized agent. We will not discriminate against you for exercising your rights. If we deny a request you may appeal by replying to our decision; if the appeal is denied you may contact your state attorney general.

Children

The Service is not directed to children under 13 and accounts are limited to adults 18 and older. We do not knowingly collect information from children.

Changes and contact

We will post updates here and notify account holders of material changes. Contact: hello@envyrofax.com.