How Fillo AI protects your data and privacy.
This Privacy Policy explains how Fillo AI ("Fillo AI", "we", "us", or "our") handles your information. It covers the Fillo AI Chrome extension ("the Extension") and this website. Fillo AI is a smart form filler that helps you complete web forms from a profile you save on your own device. We built it to be private by default: your profile and résumé stay on your device, we do not sell your data, we do not use it for advertising, and we do not run third-party advertising or analytics trackers.
Everything you enter into the Extension is stored locally in your browser (via chrome.storage)
and never leaves your device except in the specific cases described in the next section. This includes:
| Category | Examples |
|---|---|
| Profile information | Name, email, phone, address, work experience, education, salary / expected salary, and links you choose to save |
| Documents | Résumé and cover-letter files you upload, used to attach to forms and to extract your profile |
| Custom Q&A | Pre-written answers you save |
| Answer memory & past responses | Answers you pick or type, reused on later forms (you can toggle this off and clear it at any time) |
| Settings | Your chosen AI provider and endpoint, and right-click menu preferences |
You can view, edit, or delete all of this at any time from the Extension's options page, or by removing the Extension.
The Extension is designed to keep your form data on your device. The only network transmissions are the following:
To recognize what a form field is asking for, the Extension may send field descriptors only
— the field's question text, input type, and similar structural attributes — to our server
(fillo-api.anuragsingh2445.workers.dev). It does not send your profile
values, your saved answers, or your résumé. For usage counting, our server receives day-level counts and a
one-way cryptographic hash (HMAC) of the site's hostname — never the hostname itself, and never the page
URL or its contents.
If — and only if — you explicitly enable Cloud AI, the Extension sends your question plus the profile details needed to answer it to our server, which uses a third-party AI provider (OpenAI) as a service provider to draft an answer and return it to you. This is the one feature that transmits profile content off your device, and it is off by default. Nothing is retained on our server beyond anonymous usage counts, and the AI provider processes the request only to generate your answer. You can switch this feature off at any time.
If you choose to use a local AI model through Ollama, your profile, résumé text, and questions are sent only to the Ollama
endpoint you configure (by default http://localhost:11434 on your own computer). This data
does not reach us or any third party.
To operate the service and enforce fair-use limits, the Extension generates a random device identifier (a UUID) and sends a coarse timezone offset when authenticating. As with any internet request, our server also receives your device's IP address, which we use only to route the request and enforce rate limits — never to track you or determine precise location. None of this is linked to your name, email, or profile, and none of it is used for advertising.
For transparency (and consistent with our Chrome Web Store disclosures), the categories of user data involved are:
We do not collect health information, authentication credentials, personal communications, web-browsing history, or user-activity/keystroke analytics.
We use the data described above solely to provide the form-filling service you requested — recognizing fields, filling them from your profile, generating AI answers when you ask, and enforcing fair-use limits. We do not use your data for advertising, profiling, or any purpose unrelated to the Extension's single purpose.
We do not sell or rent your personal data, and we do not share it with advertisers, data brokers, affiliates, or business partners for marketing or promotional purposes. We do not use or transfer your data to determine creditworthiness or for lending purposes.
Data stored on your device persists until you delete it or remove the Extension. You can clear answer memory, past responses, your profile, and documents from the Extension's options page at any time, or remove everything by uninstalling the Extension. On our servers we retain only anonymous usage counts; request logs (including IP addresses) are kept only briefly for security and abuse prevention.
We use reasonable technical measures to protect your data, including transmitting network requests over HTTPS and keeping API keys and AI-provider credentials only on our server, never in the Extension. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
Fillo AI is not directed to children under 16 and should not be used by them. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
This website presents information about Fillo AI. It does not require an account and does not use advertising or cross-site tracking cookies. Standard server logs may record your IP address and browser type for security and reliability. The site loads fonts and icons from third-party providers to render its design.
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date above and, where appropriate, notify users through the Extension's listing or this page. Your continued use of Fillo AI after changes become effective constitutes acceptance of the updated policy.
If you have any questions about this Privacy Policy or your data, you can contact us: