In short
- Your own PDF exports stay on your device. Public templates are shared only when their owner publishes them; downloading a filled public template sends your answers to our server to generate the PDF without saving them.
- To fit fields to a page, a grey picture of it and its printed text are measured on our server, which keeps nothing of them.
- If you sign in, we keep your email address, plan and credits. Only paid plans save templates and PDFs to your account, never your answers.
- AI is optional. When you use it, the pages you choose go through our server to an AI provider, minus what you hid. We don’t keep that content.
- Paddle handles payments as our merchant of record. We never see your card.
- We count broad actions anonymously, without advertising pixels, visitor identifiers or cross-site tracking. We never sell your data.
- We may update this policy. The date above shows when it last changed.
This summary helps you read the policy. The full text below is what applies.
1.Who we are
This policy explains how formaster (“formaster”, “we”, “us”) handles personal information when you use the formaster website and app (the “Service”). formaster is the controller of that information.
For any privacy question or request, write to us through our .
2.What stays on your device
On the Free plan, original PDFs and saved templates are kept only in your browser, including when you are signed in. With a paid plan, original PDFs you open and templates you save are also saved to your private account storage so they can be reopened from another browser. Answers and signatures stay in memory for the current session. Exporting a PDF you opened yourself happens on your device. Public templates have the sharing and download behavior described below.
To fit a field to the line or box printed under it, and to read the form fields a PDF comes with, formaster has the page measured on our server: it sends a grey picture of that page and the page’s printed text, and gets back where its lines, boxes and cells are. The page is measured in memory and we don’t keep it. We also process documents when you save them to your account, publish a template, download a filled public template, or use AI, as described below.
Answers and signatures stay only in the current session unless you export the PDF. Anyone who can use your browser profile can see what it keeps, and clearing your browser’s site data deletes it.
3.Information we collect
Your account
When you create an account or sign in with your email and password, Supabase Auth verifies your credentials and we receive your email address and Supabase account identifier, and we record when your account was created and last used. Your password is managed by Supabase Auth; it is never stored in our application’s account tables.
Saved templates and their PDFs
With a paid plan, the templates you save are kept in your account, so you can open them on any device you sign in on: the template’s name, its fields’ positions, labels, types and settings, its sections and notes, whether you marked it as a favorite, the PDF’s size and fingerprint (a SHA-256 hash), and a copy of the PDF the template was made on. Free users keep PDFs and templates only in their browser. A PDF larger than 50 MB stays on your device only. Your answers and signatures are not saved to your account.
Public templates
Only templates you explicitly publish appear in the public library. Publishing shares a separate copy of the original PDF, the blank field layout, its name and the description you provide. The original PDF may already contain printed personal information, so check it before publishing. Your entered answers, signatures and images are removed from the shared field layout. Later private edits are not shared unless you publish an update. Unpublishing removes the public page and its PDF from our library; it cannot remove copies someone has already downloaded.
Anyone can browse, fill and download public templates for free, without an account. When you download, your answers, including any signatures or images you entered, are sent to our server to generate the filled PDF. We process them in memory and return the completed file directly; we do not save those answers or completed PDFs to your account or our document storage.
AI runs
When you start an AI run, your account’s credit history records its tier, its kind (placing fields, editing or translating), the credits it used and when it started. We keep no other record of the run.
An AI run happens on our server, which sends the model what it needs and passes back the fields it places. For placing and editing fields, your browser sends our server a picture and a grey picture of each page in scope with the areas you hid painted over, the page’s text without the hidden parts, the form’s existing fields with any answers already in them, and the instructions you type; our server sends the model the picture, the text, the fields and your instructions. Translating a form sends only the form’s labels and text, never your answers. Between the steps of a run, its progress is kept encrypted in your browser, not on our server. We don’t store the content of AI runs.
Plans, credits and billing
We keep your plan, your credit balance and a record of each change to it, and the Paddle customer and subscription identifiers, status and next billing date for your subscription. Your payment details are given to Paddle, not to us, and we never see your full card number.
Feedback and contact requests
When you send feedback or contact us, we receive your message, its topic, the email address you give for a reply, any number of credits you ask about, the page you sent it from, your window size, the app language and your browser’s user agent. If you are signed in, we also receive your account identifier, email address and name.
Technical information
Like any website, our hosting and infrastructure providers process your IP address and request details to deliver the Service and keep it secure. Our server logs errors, such as a failed AI request, without the content of your documents.
What we don’t collect
We count broad actions, such as opening a sample or a signup request being accepted, to understand where the app needs improvement. Each record contains only a day, an action name and a broad source category such as Meta, Google or direct. These are action counts, not unique visitor counts. We do not give visitors identifiers, store attribution in cookies or browser storage, or include email addresses, account IDs, document contents, answers, full URLs, advertising click IDs or IP addresses in these records. The counts appear in our hosting provider’s operational logs. They are not sent to an advertising platform.
We use no advertising pixels or cross-site tracking, and we don’t sell your personal information or share it for advertising.
4.How we use it, and why
- To provide the Service: your account, keeping your saved templates and their PDFs, running AI and keeping your credits. We do this to perform our contract with you.
- To bill you through Paddle and keep the records tax and accounting law require. We do this to perform our contract and to meet legal obligations.
- To answer you when you send feedback or a request, and to improve the Service from what you tell us. We rely on our legitimate interest in supporting and improving the Service.
- To keep the Service secure: preventing fraud and abuse, enforcing credit and rate limits, and fixing errors. We rely on our legitimate interest in protecting the Service and its users.
- To tell you about your account, such as changes to your plan or to these policies. We don’t send marketing email unless you have agreed to it.
- To meet legal obligations and respond to lawful requests from authorities.
6.International transfers
Our providers may process your information in the United States and other countries outside the one where you live. Where the law requires it, we rely on safeguards such as the European Commission’s Standard Contractual Clauses, the UK’s International Data Transfer Addendum or an adequacy decision.
7.How long we keep it
- Account, plan and credit records: while your account exists. When you ask us to delete your account, we delete them within 30 days, except what we must keep by law.
- Saved templates and their PDFs: until you delete them or your account. A deleted template leaves a small marker (its identifier and deletion time) so your other devices remove it too, and its PDF is deleted once none of your other templates uses it.
- AI runs: only as entries in your account’s credit history, kept with your account. We don’t keep the content of a run.
- Public templates: until their owner unpublishes them. Filled public-template downloads and their answers are processed in memory and not stored.
- Pages measured: not kept. A page is measured in memory and forgotten when the answer is sent back.
- Billing records: for as long as tax and accounting law require, by us and by Paddle.
- Feedback: for as long as we need it to answer you and improve the Service.
- Logs: for the short periods our providers keep them.
- On your device: until you delete it in formaster or clear your browser’s site data.
8.Your rights and choices
Depending on where you live, you may have the right to access your personal information, correct it, delete it, get a copy of it in a portable format, restrict or object to how we use it, and withdraw consent you have given. To use any of these rights, write to us through our . We may need to confirm your identity, and we answer within one month, or sooner where the law requires.
You can also complain to the data protection authority where you live or work.
You are in control of much of this yourself: delete templates and their PDFs in formaster, which removes them from your account too, clear your browser’s site data to remove what this device keeps, sign out at any time, and don’t start an AI run if you don’t want a page sent.
We don’t sell personal information or share it for cross-context behavioral advertising, as those terms are used in California and other US state laws.
10.Security
We protect your information with encrypted connections (HTTPS), a database and file storage that browsers can’t reach directly (only our server can, and it gives each signed-in person their own account’s private data, while explicitly published templates are available to everyone; to send or fetch one of your PDFs, your browser gets a link to that file alone, which soon expires), and AI provider keys that stay on our server and never reach your browser. No method of transmission or storage is completely secure, so we can’t guarantee absolute security.
11.Children
The Service is not meant for children under 16, and we don’t knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.
12.Changes to this policy
We may change this policy at any time. When we do, we post the new version on this page and update the “Last updated” date. If a change is significant, we will also tell you by email or in the app where we reasonably can, or where the law requires it. By continuing to use the Service after a change takes effect, you accept the updated policy.
13.Contact
For questions about this policy or your information, write to formaster through our .