Privacy Policy

Effective date: June 22, 2026

QuikFill (“QuikFill”, “we”, “us”, “our”) provides a browser extension, web dashboard, and website that detect fields on web forms and help you fill them. This Privacy Policy explains what personal data we process, why we process it, and the choices and rights you have. It applies to our extension, dashboard, and website (together, the “Service”).

1. Who we are

QuikFill operates the QuikFill extension, dashboard, and website, and is the data controller for the personal data described in this policy. For any privacy question, or to exercise your rights, contact us at [email protected].

2. Privacy at a glance

  • The extension acts only when you choose to fill a form. It does not track your browsing or read pages in the background.
  • We never send the values you type, your saved values, or full page content to AI models — only redacted field descriptions (labels, types, and options).
  • We use no advertising or analytics cookies, run no third-party trackers, and do no cross-site tracking.
  • We never sell or “share” your personal data, as those terms are defined under U.S. state privacy laws.
  • You can export or delete your data at any time — from your account settings, or by emailing us.

3. Information we process

  • Account data — your email address (required, for passwordless one-time-code sign-in) and, optionally, your first and last name. We do not store passwords.
  • Saved profile data — information you choose to save for autofill (such as names, email addresses, phone numbers, and postal addresses), stored in your private QuikFill account so it works across your devices.
  • Configuration — your extension settings, field mappings, domain preferences, and generator presets.
  • Fill history — a redacted record of fill runs containing only field labels and outcomes (for example “filled” or “skipped”), never the values that were filled.
  • AI assistance data — when you use AI to interpret a form, we send a redacted summary of the form (field labels, input types, options, and limited surrounding context) plus your locale preference to our backend, which forwards it to our AI provider. We never send your saved values or page content. We keep a redacted record of the request (the summary, timing, and token counts) for security and abuse prevention.
  • Subscription & billing data — if you buy a plan, our payment processor handles your payment details. We store your subscription status, plan, billing period, usage counters, and processor identifiers — not your full card number.
  • Account security & technical data — sign-in sessions (including the browser/device user-agent and timestamps), one-time codes (stored only as hashes), and minimal logs needed to operate and secure the Service.

4. How we use your information, and our legal bases

We process your data to:

  • provide and synchronize autofill across your devices — to perform our contract with you;
  • generate AI suggestions you review — to perform our contract and, where applicable, with your consent;
  • authenticate you and keep your account secure — our contract and our legitimate interest in security;
  • process subscriptions and prevent quota abuse — our contract and legitimate interest;
  • provide support and send service notices — our contract and legitimate interest;
  • comply with legal obligations — to meet a legal obligation.

The legal bases above are those under the GDPR. Where we rely on consent, you may withdraw it at any time.

5. AI processing

QuikFill’s AI features are review-first: AI proposes values that you review before anything is submitted, and AI never submits a form for you. To generate suggestions, we send only a redacted, structured summary of the form to Google’s Gemini API — field labels, input types, options, and limited context, capped in size and stripped of page markup by an automated privacy guard. We do not send the values you enter, your saved profile values, or full page content. Google processes this redacted data as our service provider, under its API terms, solely to return suggestions to us.

6. Cookies, tracking & local storage

The QuikFill website and product do not use advertising or analytics cookies, and we do not embed third-party trackers or perform cross-site tracking. We use only essential local storage: the extension stores your sign-in tokens and settings in your browser’s extension storage so you stay signed in, and the dashboard keeps the technical state needed to operate the app. Because we use no non-essential cookies, no cookie-consent banner is required.

7. Service providers (subprocessors)

We share personal data only with the providers that help us operate QuikFill, under contracts that require them to protect it:

  • Google (Gemini API) — AI form interpretation; receives redacted form summaries only.
  • Stripe — payment and subscription processing; receives your billing details and email.
  • Resend — transactional email (sign-in codes and account emails); receives your email address and name.
  • Railway — application hosting and database; stores the account data described above.

We may also disclose data where required by law, or to protect our rights, our users, or the public.

8. International data transfers

We and our service providers may process your data in countries other than your own. Where we transfer personal data internationally, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or an equivalent mechanism.

9. Data retention

We keep your data for as long as your account is active. You can delete saved profiles and history within the app at any time. When you delete your account, we delete your associated personal data within 30 days, except where we must retain limited records to comply with legal, tax, or security obligations. Redacted, non-identifying logs may be retained longer.

10. Security

We protect your data with encryption in transit (HTTPS), hashed credentials and tokens, and restricted access to our systems. No method of transmission or storage is perfectly secure, but we work continuously to safeguard your information, and we will notify you and the relevant authorities of a breach where the law requires it.

11. Your privacy rights

Depending on where you live, you have rights over your personal data. We honor these rights for all users, wherever you are.

If you are in the EEA, the UK, or a similar jurisdiction (GDPR / UK GDPR), you may: access a copy of your data; correct inaccurate data; delete your data; restrict or object to certain processing; port your data to another service; and withdraw consent at any time. You also have the right to lodge a complaint with your local data protection authority.

If you are a California resident (CCPA / CPRA), you may: know what personal information we collect and how we use it; access and delete it; correct it; and opt out of the “sale” or “sharing” of personal information. We do not sell or share your personal information, and we do not use sensitive personal information for purposes that require an opt-out. We will not discriminate against you for exercising your rights.

How to exercise your rights: use the Export my data and Delete account controls in your account settings, or email [email protected]. We verify requests against your account email and respond within the time the law requires (generally 30 days under the GDPR, 45 days under the CCPA). You may use an authorized agent where the law allows.

12. Children

QuikFill is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us data, contact [email protected] and we will delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the effective date above; we will communicate significant changes where appropriate.

14. Contact us

Questions about this policy or your data? Email [email protected].