Add to Chrome

FillApp Privacy Policy

Last updated: October 12, 2026

Introduction

FillApp, LLC ("FillApp," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our AI browser agent extension and related services (the "Service").

Please also review our Terms of Service at /terms-of-service, which governs your use of the Service.

Controller & Scope

FillApp, LLC (Delaware, USA) is the controller for personal information processed via the FillApp website, web app/APIs, and browser extension (the "Service"). This Policy does not apply to third-party websites or services you visit or automate using FillApp; their policies govern those sites.

Contact Information

FillApp, LLC
131 Continental Dr, Suite 305
Newark, DE 19713
Email: legal@fillapp.ai

For any privacy-related questions or concerns, please contact us using the information above.

Information We Collect

Account Information

When you create an account, we collect:

  • Email address
  • Name
  • Payment information (processed securely through Stripe)

Service Data

  • Snippets: Reusable form templates and data you create and save
  • Chat Sessions: Your interactions with FillApp’s AI agent are processed to provide the Service. Chat metadata, messages and extracted text use a 14-day inactivity expiry. Browser extension conversation history follows the same expiry. Locally saved PDF editor conversations remain until you clear the conversation or browser storage. Server recovery checkpoints follow the same expiry. Chats needed for active or paused scheduled tasks are retained while those schedules exist; the 14-day expiry resumes when their last schedule completes, stops or is deleted. Connected AI providers manage their own conversation retention.
  • Usage Analytics: Privacy‑respecting analytics configured to avoid collecting sensitive content (e.g., IP redaction where available; no capture of form inputs)

Browser Extension Data

Our extension requires access to:

  • Active Tab: To interact with forms and web pages you're currently using
  • Tabs: To perform multi-tab automation tasks as requested by you

Important: We access page content when you explicitly start a conversation, engage the agent, or approve a browser connection. While remote control is enabled, your connected AI may request actions on normal tabs in that Chrome profile, including newly opened tabs, until you stop remote control or revoke access. We do not monitor your browsing activity without your request. If you create a scheduled task, FillApp performs the saved instructions in the designated Chrome browser while Chrome is open, including when the side panel is closed.

Optional ChatGPT and Claude Connections

Approving browser access makes normal HTTP(S) tabs in the connected Chrome profile available to your assistant, including newly opened tabs. Incognito and browser-internal pages are excluded. Local file tabs are available only if you separately enable “Allow access to file URLs” in Chrome extension settings. PDF access requires you to explicitly share the single opened document in the editor. You can stop remote control in the extension, stop PDF sharing in the editor, or revoke app access at /connect.

Browser data access is a separate setting in the extension’s connection page and is off by default, including for existing connections. If you enable it, requested browsing history, bookmarks, recently closed tabs, most-visited sites and download records may be read or managed by the agent. Turn off Browser data or stop remote control to end this access. Only requested results are relayed; connecting an assistant does not upload your complete browser history.

For connected browser tabs, requested page text, form values, screenshots, page assets, debugging information (such as console or network events) and action results pass through our relay to your connected AI provider. Password controls are redacted from browser text snapshots. For shared PDFs, document text, form values, annotations, previews and requested exports may pass through the relay. Your AI provider’s privacy and retention policies apply to the data it receives. FillApp does not control copies retained in your AI conversations.

Temporary relay preview images, requested page-asset bundles and exported files expire after 15 minutes. Download links also stop working when the app’s authorization is revoked. Account connections and device registrations are retained to support access management and reconnecting; you can revoke or remove them. Per-account rate limits protect the free connection service. Operational MCP analytics sent to PostHog record an account identifier, tool name, provider, outcome, duration and technical failure category. They exclude tool arguments, page or document contents, screenshots, credentials and browser names.

Manual PDF editing runs in your browser without uploading the PDF. Open documents and edits are saved in local browser storage until you close the PDF tab or clear browser storage. Optional FillApp AI chat uploads documents and context for processing under the AI Processing section below.

How We Use Your Information

We use your information to:

  • Provide and improve our AI browser agent service
  • Process your account registration and payments
  • Store and manage your saved snippets and content
  • Analyze feature adoption and performance to improve the Service (configured to avoid collecting sensitive content)
  • Respond to your support requests and communications

AI Processing

We use third-party AI providers to power our agent:

  • OpenAI - For AI model processing
  • Anthropic - For AI model processing

When AI features run, your prompts and necessary context may be sent to these providers. We configure providers not to use your data to train their models (where controls exist) and to limit retention. We also minimize the data we send and apply redaction where feasible.

Third-Party Services

We work with trusted service providers to operate our service:

  • Payment Processing: Secure handling of subscription payments
  • Data Storage and Hosting: Cloud infrastructure, database services, and authentication
  • Analytics: Privacy-respecting analytics configured to avoid collecting sensitive content (e.g., IP redaction where available; no capture of form inputs)
  • Communication: Service-related emails and notifications

Our service providers primarily process data in the United States, and some may process data in other countries. They are contractually required to protect your data and to use it only to provide services to us.

Service Providers (Subprocessors)

We may employ third‑party companies and individuals to facilitate our Service ("Subprocessors"), provide Service on our behalf, perform Service‑related services, or assist us in analyzing how our Service is used. These third parties have access to your personal data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose. You can find a list of Subprocessors we use on our website at Subprocessors.

Important: We do not sell, or share your personal data with third parties for their commercial purposes.

We may disclose your personal information when required by law or when we believe in good faith that disclosure is necessary to:

  • Comply with legal process (subpoenas, court orders, search warrants, or other legal requirements)
  • Protect and defend our rights, property, or safety, or the rights, property, or safety of our users or others
  • Prevent or investigate fraud, security threats, or illegal activities
  • Comply with government requests or law enforcement investigations
  • Enforce our Terms of Service or other agreements

Transparency Statement: Since FillApp's founding, we have received zero government requests for user information. We are committed to protecting user privacy and will challenge requests that we believe are overly broad or inappropriate where legally permissible.

Data Learning and Privacy

When our documentation mentions that "FillApp learns from its actions," this refers only to:

  • User interface interaction patterns (e.g., how dropdowns work on specific websites)
  • Technical behaviors to optimize future interactions

We do not use submitted personal data, form content or business information to learn reusable website interaction patterns. Account data, saved snippets and processing context are retained as described in this policy.

Your Data Rights and Control

Data Deletion

You can delete your saved snippets in the extension and delete your account from the dashboard. Regular chat sessions are temporary and automatically cleared after 14 days without activity. Chats needed for active or paused schedules are retained until those schedules end, after which the same expiry applies. You can delete any chat and its schedules from the extension. When you delete content or your account, we remove it from active production systems. Residual copies may persist temporarily in encrypted backups and logs and will be purged on their normal rotation cycles.

Data Retention

  • Account & saved content (snippets): kept while your account is active or until you delete them.
  • FillApp chats and recovery checkpoints: expire after 14 days without activity. Chats needed for active or paused schedules remain available while those schedules exist; expiry resumes when their last schedule ends. Browser extension history follows the same rule and is cleaned when the extension next runs. Locally saved PDF editor conversations remain until cleared. You can delete chats, schedules and their history at any time. Connected AI apps manage their own history and retention.
  • Relay images and exported PDFs: expire after 15 minutes; revoking the associated connection invalidates its download links.
  • Inactivity cleanup: after 1 year of account inactivity, we delete stored content associated with that account.
  • Security/diagnostic logs: typically 30–180 days unless needed longer for security investigations.
  • Billing/tax records: retained up to 7 years as required by law.

Access and Portability

You can access and export your data through your account dashboard or by contacting us at legal@fillapp.ai.

Privacy by Design

Our service is built with privacy as a core principle:

  • Active Consent Only: The extension accesses page context when you start a thread or approve a browser connection
  • Only Requested Automation: Background checks run only for tasks you schedule, using the saved instructions. You can pause, stop or delete them.
  • Your Data Stays Yours: We don't sell your data or use it for any purpose other than providing our service
  • Transparent Operations: You can see every action the agent takes through our visible trace feature

Age Requirements

Our service is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us so we can take appropriate action.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes:

  • Encryption of data in transit and at rest
  • Regular security assessments
  • Access controls and authentication measures
  • Secure hosting infrastructure

Security Incidents. If we become aware of a security incident that affects your personal information, we will notify you and applicable regulators without undue delay, consistent with legal requirements.

Browser Extension Permissions

Our Chrome extension requests permissions for its available automation features. Browser data permissions do not enable access until you turn on Browser data:

  • activeTab — interact with the current page after you engage the agent.
  • tabs — read and manage normal tabs for requested multi-tab tasks.
  • tabGroups — organize tabs into groups when requested.
  • history — search browsing history when Browser data is enabled.
  • bookmarks — read or manage bookmarks when Browser data is enabled.
  • sessions — access recently closed tabs and restore requested sessions when Browser data is enabled.
  • topSites — retrieve Chrome’s most-visited sites when Browser data is enabled.
  • downloads — inspect or manage requested downloads when Browser data is enabled.
  • notifications — display requested local FillApp notifications.
  • alarms — reconnect the approved relay after Chrome suspends the extension service worker.
  • debugger — control browser tab interactions for features like clicking, typing, and page interactions.
  • storage — store extension settings and preferences locally.
  • contextMenus — show FillApp actions in the right‑click menu.
  • sidePanel — display the FillApp interface in the browser side panel.

Page Access and Data Reading

FillApp can read page content and interact with web pages to provide automation features. Page content is read when you start a FillApp task or your approved connected assistant requests a tool action. Browser data operations additionally require the separate Browser data setting.

Specifically, FillApp reads page content to:

  • Understand form fields and page structure when you request automation
  • Click buttons and fill forms as directed by you
  • Navigate through multi-step processes you initiate
  • Provide the visible action trace you see on screen

Important: FillApp reads and processes page data to perform requested actions. Stopping the agent or remote control ends active automation. An approved connection can receive new requests until you stop remote control or revoke that connection; it does not continuously upload page content or browsing history.

These permissions are used solely to provide our automation features and are not used for data collection beyond what's necessary for the service to function.

Cookies and Tracking Technologies

We use cookies and similar technologies to provide and improve our service. Cookies are small text files stored on your device that help us:

Essential Cookies

  • Authentication: Keep you logged in to your account
  • Security: Protect against unauthorized access and fraud
  • Session Management: Maintain your session across pages

Analytics Cookies

  • Usage Analytics: Privacy‑respecting analytics configured to avoid collecting sensitive content (e.g., IP redaction where available; no capture of form inputs)
  • Feature Usage: Analyze which features are most valuable to users

You can control cookies through your browser settings. However, disabling essential cookies may limit your ability to use certain features of our service. Most browsers allow you to:

  • View and delete cookies
  • Block cookies from specific sites
  • Block third-party cookies
  • Receive alerts when cookies are being sent

Our browser extension operates independently of website cookies and requires you to start a task or approve a connection before remote access.

We honor recognized browser opt‑out preference signals (such as Global Privacy Control) for choices that apply to our use of cookies and similar technologies.

International Users

Our Service is operated from the United States. While we primarily process data in the US, some service providers may process data in other countries. By using the Service, you understand your information may be transferred to and processed in the United States and, where applicable, other countries with appropriate safeguards.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on our website and updating the "Effective Date" at the top of this policy. Your continued use of the service after such changes constitutes your acceptance of the updated policy.

California Privacy Rights (CPRA)

If you are a California resident, you have the rights to know/access, delete, correct, and obtain a portable copy of your personal information. We do not sell personal information and we do not share it for cross‑context behavioral advertising as defined by CPRA. We honor opt‑out preference signals (such as Global Privacy Control) for applicable choices. To exercise rights, email legal@fillapp.ai; we may need to verify your request. We will not discriminate against you for exercising your rights.

We respond to verifiable consumer requests within 45 days (and may extend once by an additional 45 days when reasonably necessary). We may need to verify your identity and you may designate an authorized agent to make a request on your behalf where permitted by law.

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

Email: legal@fillapp.ai
Support: Through the help section in your FillApp dashboard

We will respond to your privacy-related inquiries promptly and work to resolve any concerns you may have.

This Privacy Policy is designed to be clear and comprehensive while respecting your privacy rights. We believe in transparency and user control over personal data.