Privacy Policy

• Your data travels over secure connections and is stored on infrastructure that encrypts it at rest.
• We use your data only to provide DocuFillr to you. We don't sell it, advertise with it or use it to train AI.
• Completed PDFs are deleted after 30 days; you can delete anything sooner.
• We use only essential cookies: no tracking or advertising cookies.
• Please don't upload sensitive information (see below).

Your account. Your email address and name. If you sign in with Google we receive your Google account identifier, name and email address; if you sign up with a password, we store only a secure hash of it, never the password itself.

Your content. The PDF documents you upload, the forms you build from them, and the answers and completed PDFs created when you or others fill them in.

Answers to shared forms. When someone fills in a form you shared, we store what they entered on your behalf. We don't ask people filling in forms to create an account.

Technical information. IP addresses and basic request details (such as the time and the page requested), used to keep DocuFillr secure, to limit abuse such as spam and floods of requests, and to fix problems. Our hosting provider keeps these logs for a short time.

• To provide DocuFillr: storing your forms, filling in PDFs, showing your History (needed to provide the service you asked for).
• To keep it secure: rate limits, expiring links, preventing spam and misuse (our legitimate interest in protecting the service and its users).
• To talk to you about your account, security or important changes (needed to provide the service).
• To meet legal obligations, where the law requires it.

We don't use your content for advertising, profiling or training AI models, and we don't sell or rent it.

• Everything is sent over encrypted connections (HTTPS).
• Your documents, completed PDFs and form answers are stored with our hosting provider, Cloudflare, which encrypts all stored data at rest.
• Each account can only see its own forms, documents and submissions.
• Shared links expire and accept a limited number of responses.
• We don't look at your content, except when you ask us to help with a problem, to deal with misuse, or when the law requires it.

No online service can be completely secure, so we can't guarantee that your information will never be accessed without permission. If a breach affects you, we will tell you as the law requires.

When you share a form and collect answers, you decide what is collected and why. For those answers you are the controller, and DocuFillr is your processor (or "service provider"): we store and process the answers only to provide DocuFillr to you. You are responsible for having a lawful reason to collect them and for telling the people filling in your form how you will use their information.

If you filled in someone else's form and want to see, change or delete your answers, please contact the person or organisation that sent it to you. We will help them respond.

We use a small number of trusted providers to run DocuFillr. They process data only on our instructions:

• Cloudflare: hosting, file storage, database and protection against attacks.
• Google: only if you choose "Continue with Google".

We may also disclose information if the law requires it, to protect people's safety or our rights, or as part of a transfer of the service, in which case this policy will continue to apply. Our providers may process data in other countries; where that happens, it is protected by their contractual commitments and safeguards such as standard contractual clauses.

• Completed PDFs: 30 days, then deleted automatically.
• Uploads never saved as a form: 48 hours.
• Forms and submitted answers: until you delete them or your account.
• Your account: until you ask us to delete it.
• Security logs: a short period, kept by our hosting provider.

DocuFillr uses only what it needs to work. We don't use analytics, advertising or tracking cookies.

• Sign-in cookies keep you signed in securely. They are essential and are removed when you sign out.
• Preferences in your browser (local storage) remember your theme, autosave setting, recently typed values when you fill in your own forms, and that you have seen the cookie notice. They never leave your device.

You can clear these at any time in your browser settings; you will be signed out and your preferences reset.

Depending on where you live (for example under the GDPR in the EU and UK, or the CCPA in California) you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict how we use it, and to withdraw consent. You can delete your forms and submissions yourself in DocuFillr; for anything else, email support@docufillr.com. We will reply within one month.

You also have the right to complain to your local data protection authority, though we would appreciate the chance to sort out any concern first.

DocuFillr is not meant for anyone under 16, and we don't knowingly collect their information. If you think a child has given us information, contact us and we will delete it.

If we change this policy we will update the date at the top and, for significant changes, tell you in the app or by email.

Questions or requests about your privacy: support@docufillr.com.