Privacy Policy

Last Updated: January 18, 2026

1. Information We Collect

Account Information

When you create an account, we collect:

• Name and email address (from OAuth provider)
• Profile picture (from OAuth provider)
• Account preferences and settings

Form Data

When you create and use forms, we collect:

• Form templates you create
• Form fields and configurations
• Submissions to your forms
• Files uploaded through your forms

Usage Information

We automatically collect:

• IP addresses
• Browser type and version
• Device information
• Pages visited and features used
• Time and date of visits

2. How We Use Your Information

We use your information to:

• Provide and maintain our service
• Process and store form submissions
• Send service-related notifications
• Improve our service and user experience
• Detect and prevent fraud or abuse
• Comply with legal obligations

3. Data Sharing and Disclosure

We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

Service Providers

We may share data with trusted service providers who assist us in:

• Hosting and infrastructure (Vercel, PostgreSQL)
• Authentication services (Google OAuth)
• Payment processing (Paddle.com Market Limited)
• Email delivery services
• Analytics and monitoring

Payment Processing

We use Paddle.com Market Limited as our Merchant of Record for payment processing. When you make a purchase, Paddle collects and processes your payment information in accordance with their Privacy Policy. We do not store your full credit card details on our servers.

Legal Requirements

We may disclose information if required by law or to:

• Comply with legal process
• Protect our rights and property
• Prevent fraud or abuse
• Protect user safety

4. Data Security

We implement appropriate security measures to protect your data:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest for sensitive data
• Regular security audits
• Access controls and authentication
• Secure data centers

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain your data for as long as:

• Your account is active
• Needed to provide our services
• Required by law
• Necessary for legitimate business purposes

When you delete your account, we permanently delete your data within 30 days, except where retention is required by law.

6. Your Rights

Depending on your location, you may have the right to:

Access and Portability

• Access your personal data
• Export your data in a portable format

Correction and Deletion

• Correct inaccurate information
• Request deletion of your data

Control and Objection

• Object to data processing
• Restrict how we use your data
• Opt out of marketing communications

To exercise these rights, contact us at privacy@fillflow.ai

7. Cookies and Tracking

We use cookies and similar technologies to:

• Keep you signed in
• Remember your preferences
• Analyze usage patterns
• Improve security

You can control cookies through your browser settings. See our Cookie Policy for more details.

8. Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately.

9. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in compliance with applicable laws.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by:

• Posting the new policy on this page
• Updating the "Last Updated" date
• Sending an email notification (for material changes)

11. Contact Us

If you have questions about this privacy policy or our data practices, please contact us:

This privacy policy is effective as of January 18, 2026. By using FillFlow, you agree to this policy.