Privacy policy

ChatFill PDF ("ChatFill") is a product of Edenville Labs LLC ("Edenville Labs", "we", "us"). This policy covers the ChatFill web app at app.chatfillpdf.com, the ChatFill iPhone app, and our website at www.chatfillpdf.com.

Questions about privacy: email support@chatfillpdf.com, or write to Edenville Labs LLC, 8 The Green, Ste A, Dover, DE 19901.

Your account. Your email address. If you choose to save them in your profile, your name, phone number and signature.

Your documents. The PDFs you upload, the answers filled into them, the messages you type to ChatFill, and the finished PDFs.

Your voice. When you use voice, ChatFill records your speech and sends the recording to be turned into text. We do not store the recording itself.

Signatures and signing records. The signatures you draw, type or save, and any photo of a signature that a signer uploads. When you or anyone you send a document to agrees to sign and signs, we record their name, email address, network (IP) address, device and browser, the times they agreed and signed, and a digital fingerprint of the document before and after signing.

People you send documents to. The names and email addresses you enter when you send a document for signature.

Payments. On the web, Stripe collects your card details on its own checkout page. We receive your plan, your billing status and a Stripe customer number, never your full card number. On iPhone, Apple handles payment and RevenueCat tells us your subscription status.

How you use ChatFill. Pages you visit, features you use, and your browser and device type. When you are signed in, this is tied to your account, so it is not anonymous. It never includes a document's contents, a field value or a file name.

Messages to support. What you send us when you email support.

On iPhone. The app asks for your microphone and speech recognition (for voice), your camera (to scan a paper document) and Face ID (to unlock the app). Face ID works only on your phone. We never receive it. The app stores your last signed-in email and a few settings on your phone. Voice recordings and exported PDFs are temporary files that are deleted after use.

Cookies. The web app uses cookies and similar storage to keep you signed in. The website and the web app use a PostHog cookie to count visits. We do not use ad trackers.

We use your information to:

• fill your forms, sign documents and send them for signature;
• send the emails ChatFill needs, such as sign-in codes, signing requests, reminders and copies;
• run your plan, count your monthly allowance and bill you;
• keep ChatFill working and secure, and stop abuse;
• understand how ChatFill is used, so we can improve it;
• answer you when you contact us; and
• meet our legal duties.

We do not sell your personal information. We do not use it for advertising. ChatFill does not use your documents to train AI.

We share information only with the companies that run parts of ChatFill for us, with the people you choose, and when the law requires it.

Companies that run parts of ChatFill:

• Anthropic runs the Claude AI that fills your forms. It receives the contents of your form (its fields and, for a PDF without clickable boxes, pictures of its pages) and your chat messages.
• OpenAI turns voice recordings into text. It receives your recordings.
• Supabase is our database and file storage. It stores your account, documents, answers, signatures and signing records in the United States.
• Vercel hosts the web app and the website, so it handles every page request.
• Resend sends ChatFill's emails. It receives the email addresses we send to and the emails themselves, which can include links to documents and small PDF attachments.
• Stripe takes web payments. It receives your payment details and your email address.
• Apple and RevenueCat handle subscriptions bought in the iPhone app.
• PostHog measures visits and app use. It receives the usage details described above and, when you are signed in, your account number.
• Cloudflare runs the domain name service and email routing for chatfillpdf.com and delivers the software that shows PDFs in your browser. It sees network details such as IP addresses.
• ipify is a lookup service. When someone signs, the signing page asks ipify for the signer's IP address, to put it in the signing record.

Under their business terms, Anthropic and OpenAI do not use this data to train their AI models. Anthropic's policy is to delete it within 30 days unless it is flagged for misuse or the law requires longer.

People you choose. When you send a document for signature, each person you send it to sees the document and the boxes you give them. When everyone has signed, each person gets a copy, and the sender gets the Certificate of Completion. That certificate lists each signer's name, email address, IP address and device.

When the law requires it. We share information if the law requires it, to protect the rights and safety of our users or others, or as part of a sale or merger of our business. In a sale or merger, this policy keeps applying to your information.

ChatFill is not designed for HIPAA-regulated use and does not sign business associate agreements. If you are a healthcare provider, a health plan, or a vendor working for one, do not use ChatFill to handle patients' health information.

You can use ChatFill to fill out your own forms, including health forms. Before you upload sensitive health details, know that the form's contents go to our AI providers as described in section 4.

While your account is open, your documents and answers stay until you delete them or delete your account.

Signature requests. The PDF copies of a signature request are deleted 90 days after the request is cancelled, declined or expires. The Certificate of Completion and the signing history are kept, because they are the record of who signed and when.

When you delete your account, we sign you out everywhere and close the account at once. Your share links stop working, and your pending signature requests are cancelled. We permanently delete your data 30 days later. We keep signing records, certificates and copies of documents that other people signed, because those records belong to the other signers too.

We may keep some records longer when the law requires it, such as billing records. Deleted data can stay in our database provider's backups for a short time until those backups are replaced.

Your documents and answers travel over encrypted HTTPS connections. Supabase encrypts stored data. Access rules stop one account from reading another account's records.

Today, anyone who has the exact web address of a stored file can open it. We are moving every file behind links that expire.

Our team can technically reach stored data. We only look when we need to support you, keep ChatFill secure, or meet a legal duty.

No online service can promise complete security. If we learn of a breach that affects your information, we will tell you as the law requires.

• See and change your details: in your profile in the app.
• Delete documents: from your library in the app.
• Delete your account: in your account settings, on the web or in the iPhone app.
• Cookies: you can block or clear cookies in your browser. If you block them, you may not stay signed in.
• Emails: ChatFill sends the emails the service needs. We send marketing emails only to people who asked for them, and each one has a way to unsubscribe.

Depending on where you live, you may have the right to know what personal information we hold about you, to get a copy, to correct it, to delete it, and to opt out of its sale or its use for targeted ads. We do not sell personal information or use it for targeted ads. To use any of these rights, email support@chatfillpdf.com from the address on your account. We will not treat you differently for using them.

ChatFill is not for children under 13, and we do not knowingly collect their information. If you think a child has given us information, email us and we will delete it.

We are based in the United States, and we store and process information here. If you use ChatFill from another country, your information will be sent to and processed in the United States.

When we change this policy, we will post the new version here and update the date at the top. If a change is significant, we will tell you by email or in the app before it takes effect.

Email support@chatfillpdf.com, or write to Edenville Labs LLC, 8 The Green, Ste A, Dover, DE 19901.