What you give us, and what becomes of it
- Your documents (CV text you paste, PDF, Word or text files you choose, a folder, a company sheet, a photo of a certificate) are read once by the FormFillPilot engine and turned into a structured profile: name, contact details, work history, education, skills, business details and the facts you wrote (notice period, salary expectation, right to work, VAT number, delivery days). The profile is kept on our server under your key. The raw documents are not stored.
- The CV file for "attach your CV" fields stays in your own browser storage; it is handed to the page's upload field when a form asks for it and never uploaded to our server.
- The form you are filling: the labels, types and option lists of its fields, the table headers around them, and the visible text of the page (title, description, instructions) are sent to our server so the answers can be planned. They are not stored beyond a session log that keeps the site address, the page title, the number of fields and how long the fill took.
- Answers you accept (free-text answers to questions, facts you typed in the mirror) are remembered under your key so the next form with the same question needs no new work, and so a wording used before can be rephrased. They are yours to delete (see "Keeping, deleting, your rights").
- A screenshot of the form is taken only when the page reads thin (fewer than four fields found) and is used once to spot fields the reader missed. It is not stored.
- A PDF form you choose on the PDF forms page is uploaded to our server, read and filled there, and kept at most 30 minutes, together with its filled copy; then both are deleted. "Forget now" on the page deletes them at once, and choosing another PDF deletes the previous one. We keep no file name and no value; only counts (fields, pages, how long it took), and a short code computed from the file so the same blank form is recognised again. For the boxes the built-in form rules do not answer, only the box names, a picture of that page and your profile details are sent to the language-model provider to plan the answers, as for a web form. Answers you type into the page yourself are remembered under your key like accepted answers on web forms, except identity numbers and dates of birth. The filled PDF is sent nowhere: you download it.
Your key and your AI usage bar
FormFillPilot has no account and no password. A key identifies you; it is stored in your browser and, if you bought, it is linked to the email of the purchase. The free applications and the AI usage bar are counted on our server against the key. Purchases are one-time; we keep the payment provider's transaction id and what was bought (the base plan or a refill), nothing about your card.
Who processes the data
- Our server (Hostinger, United Kingdom) runs the FormFillPilot engine and keeps the profile, the remembered answers, the session log and the AI usage balance.
- Language-model providers (through OpenRouter) receive the text needed to build the profile and to plan answers: the documents you gave, the form's labels and the page text, and for a PDF form a picture of the page being planned. They process it to return the answers; we do not use providers that train on this data.
- Stripe (merchant of record on formfillpilot.com) and Paddle (merchant of record on microcitylabs.com) handle payment, invoices and taxes for the base plan and the refills.
Nothing is sold, shared for advertising, or used for anything but filling the forms you open.
What the extension can see in your browser
The extension reads and fills form fields only on the page where you opened its panel (toolbar click, Alt+Shift+F, or the right-click item "fill this field"), including forms inside embedded frames on that page. It does not read your browsing history, other tabs, passwords or cookies, and it never submits a form.
Keeping, deleting, your rights
- Your profile, remembered answers and session log stay until you delete them or ask us to.
- To delete everything held under a key, email contact@microcitylabs.com from the address you used, or paste the key in the message. We delete within 7 days and confirm.
- Under the UK GDPR you can ask for a copy of what we hold, correct it, or object to processing. Same address. Our registered office and legal contact are on the legal page; the general Privacy Policy applies alongside this notice.
This website
formfillpilot.com is a static site. It sets no cookies of its own and runs no analytics script. Fonts are loaded from Google Fonts, which sees your IP address when they load. Payment pages are served by Stripe under its own privacy policy.
Changes
When this notice changes, the date at the top changes and the extension's store listing points to the new text.