Effective date: September 6, 2026
FillMyForms is operated by Rescape Inc., doing business as FillMyForms (“we,” “us,” or “our”). This policy explains how we handle information when you use fillmyforms.com and its form-filling application or integrated services.
We collect the information you provide when you upload or fill out forms, create an account, or contact us. Depending on what you provide, this may include your name, contact information, signatures, uploaded documents, form responses, and health, insurance, financial, or other personal information contained in those documents or responses.
We use this information to process and fill your forms, save your progress, provide account and support services, and maintain the security and operation of FillMyForms. When you are signed in, we also save the information you enter into forms so it can be used to fill future forms.
Account and technical information: When you create an account, we receive and store your email address and name. If you use a third-party login service such as Apple or Google, we receive the name and email associated with that account. We do not store any profile pictures. We also collect limited technical data to operate and secure the service, including IP addresses for abuse prevention, error and performance diagnostics, and standard server logs.
Sign-in and guest use: You can use FillMyForms without an account (“guest session”); forms you upload and data entered in guest sessions are tied to an anonymous guest session in your browser.
If you create an account during that session, your forms and data become part of your new account. If you sign in to an existing account (with email, Google or Apple), the forms from your guest session are moved to that account so you can keep working on them, and the anonymous guest session is closed. We don't combine your guest activity with any other information except to move forms and data across log-in. When you sign out, your form and data stay with your account and your browser starts a new, empty guest session. Signing out does not delete information already saved to your account.
With an account. We securely store the information you enter while signed in so you can reuse it in future forms.
Scanned or uploaded data: When you scan a document with your camera, we collect technical camera and device details (such as camera model and screen size) to improve scan quality; we never collect your location. We store and process uploaded or scanned images using the retention rules in Section 2. We may use third parties for OCR and processing of uploaded images or files.
Form structure and training: We may use anonymized form layout and modifications (such as field types, counts, and spatial locations, and relationships to one-another) strictly to train our internal models to improve the service. We never use your entered text or values, nor do we share your data with third parties for AI training. Processing providers that handle uploaded images or documents for us act on our instructions under contracts that prohibit using your content to train their models or for any purpose other than providing their service to us. See Section 3.
Signatures: As evidence of signature, when you sign a document, we record your IP address, browser information, the time of signing, and the name you typed.
Without signing in. We keep guest session images and entered data for 24 hours from the time of last activity so you can return and continue filling your form. Activity is any interaction with the page, including automated saves and refreshes. We delete that data after this period.
This includes extracted values and entered data. Our processing providers may keep temporary copies for a limited period for security and abuse monitoring, as described in Section 3.
With an account. We securely store the information you enter while signed in so you can reuse it in future forms.
The 24-hour period applies to guest form data. Account records and website analytics have separate retention periods described in this policy.
Deletion and other records. When you ask us to delete your account or data, we will delete your account and the forms, documents and signatures associated with it from our active systems within 30 days or sooner as required by law. Copies may remain in our encrypted backups for up to 35 days after that, until those backups are automatically overwritten; we don't restore deleted data from backups except where needed to recover from a system failure or when otherwise required by the law. Our service providers delete the information they process for us according to their contracted retention schedules, which are generally 90 days or less.
We may keep certain records for longer where requested by you or necessary by law or for business operations: records of electronic signatures, which serve as evidence that a document was signed, for as long as needed to support the validity of the signature; security and access logs, for up to 12 months, to protect the service and investigate misuse; support messages, for up to 24 months after the conversation ends; and any information we are required to keep by law or to resolve disputes. To send data deletion requests, please email privacy@fillmyforms.com.
We share information only when necessary to render services, at your request, or when required by law.
We use service providers to help operate FillMyForms and to perform necessary functions, such as data storage, cloud hosting, cloud monitoring, image processing, email delivery, authentication and sign-in, and analytics. These vendors may interact with form images for processing, or data for storage or serving needs to render services that you request.
We may also disclose information when you direct us to share or send a form or respond to a form request, when required by law, or when reasonably necessary to protect the security and legal rights of our users or service, as permitted by law.
Automated document processing. We use cloud AI services to read and extract information from uploaded images and documents. Under our contracts with these providers, they process your content only to provide the service to us, do not use it to train or improve their models, and may keep temporary copies for a limited period for security and abuse monitoring. This processing takes place in the United States.
Form requests and upload links. If you send someone a link to upload a document or complete a form, you authorize us to deliver what they submit to you, and you are responsible for how you use it. If you complete a form or upload a document in response to someone else's link, you authorize us to deliver your responses, documents, and signatures to that person or organization, who will hold their own copy under their own privacy practices. Deleting your account or data with us does not delete copies already delivered.
We do not sell entered data or use it for behavioral targeting or advertising
You may connect third-party applications, AI assistants, or agents to your FillMyForms account, including through our hosted Model Context Protocol (MCP) service or an access token. A connected application can view, create, fill, sign, share, and delete forms, documents, saved information, and signatures within the permissions you grant, and we treat its requests as your instructions.
Information a connected application retrieves leaves our systems and is handled under that application's own terms and privacy practices, which we do not control. Consider what you allow it to access. We record the connections you authorize and the requests made through them, including timestamps and technical details, to operate, secure, and support the service. You can revoke a connection at any time using the controls we provide or by contacting privacy@fillmyforms.com; revoking does not retrieve information the application already received.
Our application uses your browser storage, not cookies, for everything it needs to operate, such as logged-in status, form history, recently opened forms, preferences, and device identification. Cookie use is limited to enabling Google Analytics
We use Google Analytics to understand how visitors use our website. It may collect cookie identifiers, browser and device information, IP addresses used to derive approximate location, pages visited, referring pages, and interaction events. Our use of Google Analytics is limited to the public pages of our website at app.fillmyforms.com, such as the home and upload page. We do not run Google Analytics on the pages where you fill in or view a form, reset your password, or transfer a form between your devices, and we remove security codes and password-reset tokens from any web addresses we report. Google Analytics never receives the documents you upload or the information you type into forms. We do not use Google Analytics advertising features, such as Google signals or ad personalization.
Analytics cookies expire 2 years after your last visit, subject to browser limits. This time period renews with each visit. Aggregate reports may be retained longer. These periods are separate from our 24-hour retention of guest form data. Any settings or preferences stored across Google Analytics are honored.
Learn more in Google’s Privacy Policy and Google’s explanation of information collected from partner sites and apps.
Security safeguards and physical security: We use reasonable administrative, technical, and physical safeguards designed to protect your information from unauthorized access, loss, or misuse. Our physical security measures include hosting data with cloud infrastructure providers (such as AWS and Render) that maintain strict physical access controls, continuous monitoring, and secure data center facilities. Details on our current security controls are available in our Trust Center at trust.fillmyforms.com.
No guarantee of absolute security: While we implement robust protections, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee that your data will never be accessed, disclosed, altered, or destroyed by a security breach.
Your security responsibilities: You are responsible for maintaining the security of your own devices, internet connections, and access credentials. To protect your information, you should:
Incident notification and intended use: In the event of a security incident that compromises your personal information, we will notify affected users without unreasonable delay, except where delayed by law enforcement obligations. FillMyForms is a general-purpose form utility provided on an "as-is" basis and is not intended for storing unencrypted, highly sensitive regulatory records without authorization.
Healthcare information: Healthcare organizations should contact inquiries@fillmyforms.com before using FillMyForms to process protected health information on behalf of a HIPAA-covered entity or business associate. Where we act as a business associate, applicable HIPAA requirements and the relevant Business Associate Agreement govern our handling of that information. This privacy policy does not replace a Business Associate Agreement or a healthcare provider’s Notice of Privacy Practices.
You may request access to, correction of, a copy of, or deletion of your personal information by contacting privacy@fillmyforms.com.
We may need to verify your identity or authority before completing a request. Please do not include completed forms, identification documents, or other sensitive information in your initial email. We will explain how to provide any necessary verification securely.
Depending on where you live and applicable law, you may have additional rights, including withdrawing consent, opting out of certain processing, appealing a decision about a request, or complaining to a privacy regulator. To appeal a decision, contact privacy@fillmyforms.com. We respond within the time required by applicable law.
When we process information on behalf of an organization, we will help direct your request to that organization where appropriate, without limiting any rights you have under applicable law.
Information about others. Only provide another person’s information if you have authority to do so.
Children and age eligibility. FillMyForms is intended for adults and is not directed to children. You must be at least 18 years old, or the age of majority where you live if higher, to create an account or use our form-filling services, including without an account. Minors may not use the service themselves.
An eligible adult may submit information about a child when completing forms on the child’s behalf, provided the adult has the legal authority to do so. This may include a parent, legal guardian, or appropriately authorized healthcare professional. We handle that information in accordance with this Privacy Policy and applicable law.
We do not knowingly collect personal information from minors using the service themselves. If we learn that a minor has used the service and provided personal information in violation of this policy, we will take steps to prevent further use and promptly delete the personal information collected through that use, except to the extent retention is required by law.
If you believe a minor has used FillMyForms or provided personal information without appropriate authority, please contact privacy@fillmyforms.com. Please do not include completed forms or other sensitive information in your initial message.
Where information is processed: Data is processed and stored in the United States using standard contractual clauses (SCCs) and privacy frameworks supported by our cloud infrastructure providers (such as AWS and Render). We process your information based on the necessity of performing our service and our legitimate interest in maintaining a secure platform.
European Union and UK users: If you access FillMyForms from the EEA or UK, your data is transferred to and stored in the United States using standard contractual clauses (SCCs) and privacy frameworks supported by our cloud infrastructure providers (such as AWS and Render). We process your information based on the necessity of performing our service and our legitimate interest in maintaining a secure platform.
Policy changes. We may update this policy as our service or practices change. We will update the effective date above and provide additional notice or obtain consent when required by law.
Rescape Inc. — FillMyForms
Email: privacy@fillmyforms.com
Mailing address: 2093 Philadelphia Pike #5345, Claymont, DE 19703