Privacy Policy

We collect the following categories of information:

• Account information — such as your name, email address, phone number, and password (which we store only in hashed form) when you create an account.
• Form and document data — the personal details you choose to save for autofill (for example, addresses, identification numbers, and custom fields), and the documents and forms you upload, fill, or share.
• Collaboration data — the email addresses of people you invite, the roles you assign, and activity relating to shared documents and completion requests.
• Payment information — if you purchase a paid plan, billing details are collected and processed by our third-party payment processors; we do not store full card numbers on our servers.
• Technical and usage data — such as IP address, device and browser type, operating system, pages viewed, features used, and timestamps, collected automatically to operate and improve the Services.
• Communications — information you provide when you contact support, request a demo, or respond to surveys.

We use your information for the following purposes:

• To provide, maintain, and operate the Services, including autofilling forms, managing documents, enabling collaboration, and tracking completion.
• To create and secure your account and to authenticate your access.
• To process transactions and send related information such as receipts and renewal notices.
• To send automatic reminders and notifications you have requested or configured.
• To respond to your enquiries and provide customer support.
• To monitor, diagnose, and improve the performance, reliability, and security of the Services.
• To detect, prevent, and address fraud, abuse, and security incidents.
• To comply with our legal obligations and enforce our Terms of Service.

We do not sell your personal information, and we do not use the contents of your forms or documents for advertising.

Where applicable law requires a legal basis for processing (for example, the EU/UK GDPR), we rely on one or more of the following:

• Performance of a contract — to deliver the Services you have signed up for.
• Consent — for example, where you choose to store certain data or opt in to communications; you may withdraw your consent at any time.
• Legitimate interests — such as securing and improving the Services, provided these interests are not overridden by your rights.
• Legal obligation — where we must process information to comply with the law.

If you are located in India, we process personal data in accordance with the Digital Personal Data Protection Act, 2023 and the rules made under it.

Security is central to FormFills. We apply technical and organisational measures designed to protect your information, including:

• AES-256 encryption for data at rest and TLS encryption for data in transit.
• A zero-knowledge architecture for sensitive autofill data, where supported, so that information is encrypted with keys derived from your credentials and is not readable by FormFills.
• Optional local, on-device storage for your most sensitive information.
• Access controls, authentication safeguards, and — where available — biometric or multi-factor authentication.
• Continuous monitoring, logging, and review of our systems.

No method of transmission or storage is completely secure. While we work hard to protect your information, we cannot guarantee absolute security, and you are responsible for keeping your account credentials confidential.

We do not sell your personal information. We share information only in the following limited circumstances:

• Service providers and sub-processors — trusted third parties who perform services on our behalf (such as cloud hosting, payment processing, analytics, and email delivery), under contractual confidentiality and data-protection obligations.
• Collaborators you choose — when you share a document or send a completion request, the relevant information is shared with the people you invite.
• Legal and safety — where required by law, regulation, legal process, or a governmental request, or to protect the rights, property, or safety of FormFills, our users, or the public.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

We retain your personal information for as long as your account is active or as needed to provide the Services. We also retain information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer required, we delete or anonymise it. You may delete your data or close your account at any time, after which we will delete or de-identify your personal information within a reasonable period, except where retention is required by law.

Depending on your location, you may have the following rights in relation to your personal information:

• Access — to request a copy of the personal information we hold about you.
• Correction — to request that inaccurate or incomplete information be corrected or updated.
• Deletion — to request the erasure of your personal information.
• Portability — to receive certain information in a structured, commonly used, machine-readable format.
• Withdrawal of consent — where our processing is based on your consent.
• Objection or restriction — to object to, or request that we restrict, certain processing.
• Nomination — where applicable, to nominate another individual to exercise your rights in the event of your death or incapacity.

You can exercise many of these rights directly from your account settings, or by contacting us using the details below. We will respond within the timeframes required by applicable law. You also have the right to lodge a complaint with the relevant data protection authority.

We use cookies and similar technologies to operate the website, remember your preferences, maintain your session, and understand how the Services are used. You can control cookies through your browser settings; please note that disabling certain cookies may affect the functionality of the Services.

FormFills may process and store information in countries other than the one in which you reside. Where we transfer personal information across borders, we take steps to ensure it is protected in accordance with this Policy and applicable law, including by using appropriate safeguards such as contractual protections.

The Services are not directed to children under the age of 18, and we do not knowingly collect personal information from children. If you believe that a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.

The Services may contain links to, or integrate with, third-party websites, forms, and applications (for example, government portals or SaaS platforms on which you fill forms). We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will post the updated Policy on this page and revise the "Effective date" above. Where changes are material, we will provide additional notice, such as by email or an in-app notification. Your continued use of the Services after an update constitutes acceptance of the revised Policy.

If you have any questions, requests, or concerns about this Privacy Policy or your personal information, please contact us:

• General privacy enquiries: privacy@formfills.in
• Grievance Officer: grievance@formfills.in

We are committed to resolving complaints about your privacy and our handling of your personal information in a timely and transparent manner.