Privacy policy

Fillauto is built so document contents stay on the device where you opened them. The Privacy page lists each category of data separately so you can decide whether the product fits your work.

What the extension stores locally

Your profile and aliases stay in your browser. Each profile value is encrypted at rest with a non-extractable key, and an optional passphrase can wrap that key.

What the Fillauto server stores

The server stores account email, plan, subscription status, usage counters, and trial claims containing an install_id and device_hash.

The device hash is a SHA-256 digest of platform, architecture, language list, timezone, screen-size class, and browser major version. A keyed HMAC of the IP is retained for 30 days to prevent repeated trial claims; the IP is not stored in clear text.

What Paddle stores

Paddle processes payment details as merchant of record and issues invoices. Fillauto never sees card numbers.

What this site stores

When enabled, Cloudflare Web Analytics measures visits without cookies. Feedback and support forms store only submitted answers in Cloudflare KV and do not include an IP address in the saved record.

What we never store

Fillauto never stores documents, page images, field values, or profile values on its server.

Your rights and deletion

Choose Delete my account in the extension or ask through the Support page.