Your documents, in plain words.

• Anthropic runs the Claude AI that fills your forms. It gets the form's contents and your chat messages.
• OpenAI turns your voice into text. It gets your recordings. We don't store them.
• Supabase stores your account, files and signing records in the United States.
• Vercel hosts the app and this website.
• Resend sends ChatFill's emails.
• Stripe takes web payments. We never see your full card number.
• Apple and RevenueCat handle subscriptions bought in the iPhone app.
• PostHog counts visits and app use. It never gets a document's contents, a field value or a file name.
• Cloudflare runs our domain and email routing.
• ipify tells the signing page the signer's IP address, for the signing record.

Under their business terms, Anthropic and OpenAI do not use this data to train their AI models. Anthropic's policy is to delete it within 30 days unless it is flagged for misuse or the law requires longer. The full list is in our privacy policy.

You can, and so can the people you send a document to. Our team can technically reach stored data. We only look when we need to support you, keep ChatFill secure, or meet a legal duty.

Today, a stored file can be opened by anyone who has its exact web address. We are moving every file behind links that expire. Until then, think twice before uploading forms with Social Security or bank account numbers.

Your documents stay in your account until you delete them or delete your account.

The PDF copies of a signature request are deleted 90 days after the request is cancelled, declined or expires. The Certificate of Completion and the signing history are kept, because they are the record of who signed and when.

When you delete your account, we sign you out everywhere and close the account at once. We permanently delete your data 30 days later. We keep signing records, certificates and copies of documents that other people signed, because those belong to the other signers too.

ChatFill is not designed for HIPAA-regulated use and does not sign business associate agreements. If you are a healthcare provider, a health plan, or a vendor working for one, do not use ChatFill to handle patients' health information.

You can use ChatFill to fill out your own forms, including health forms. Before you upload sensitive health details, know that the form's contents go to our AI providers as described above.

Edenville Labs does not have a SOC 2 report or an outside security audit. We are a small company, and we would rather say so than put a badge on the page.

Email support@chatfillpdf.com with "Security" in the subject. Tell us what you found and how to see it. Please don't test on other people's accounts or data.