GistFill Privacy Policy
GistFill: AI Form Filler ("GistFill" or "the extension") is provided by Pocket Tools ("we"). This policy explains what data GistFill handles, where it is handled, and who it is shared with.
In short
What you write, the forms you fill and the details you put in them stay on your computer: the AI that fills the form runs there, and none of it is ever sent to us or anyone else. Only if you sign in do we learn your email address, your Google account name, your plan, and how many forms you filled this month.
Your details stay on your computer
- The pages you visit: GistFill runs on every website so it can tell whether a page has a form and show its button there. It reads a form's structure (field names, types and choices) only on your computer. It does not record which pages you visit.
- What you write: the details you type into GistFill's panel are given, together with the form's field names and choices, to an AI model that runs on your own computer. The page's other content and the values already in its fields are not given to the model. What you write is not kept after the panel closes.
- The filled form: GistFill only writes into the form's fields on the page. You decide whether to submit it; the extension never submits for you. Passwords, verification codes, file uploads and hidden fields are never read or filled.
We never collect, store or see what you write, the forms you fill or what is in them. The part of GistFill that handles them has no way to connect to the internet, and every build checks this automatically. The AI model is downloaded to your computer once by your browser, not through us.
Data stored in your browser
The extension uses Chrome's extension storage (chrome.storage) to keep, on your computer: your preferences, the sites where you hid GistFill's button, how many free fills you used this month while signed out, the last plan details we received after you signed in (shown when the server can't be reached), and the model download progress. None of this is uploaded, and Chrome deletes it when you remove the extension.
Data we collect when you sign in
Signing in is optional. Without it you still get a number of free fills each month, and we collect nothing.
When you sign in with Google, we receive and store, through Google Sign-In (scopes limited to openid, email and profile) and Firebase Authentication:
- your Google account's email address, name and account identifier;
- when your account was created;
- your plan: Free or Premium, monthly or yearly, subscription status, and the current billing period;
- this month's usage: how many forms you filled (a number only, with no content and no website addresses);
- after you pay, the customer ID Stripe assigns you.
We use this data only to sign you in, count your free fills, provide Premium and manage your subscription. We do not sell it, use it for advertising, or build profiles from it.
Feedback
If you send us feedback from our feedback page, we receive what you write, the email address you add (optional), the GistFill version and your Chrome version. We store it in a Google Sheets spreadsheet and use it only to answer you and improve GistFill. To limit abuse we also count how many messages come from each network address in an hour, keeping only a scrambled (hashed) form of the address, never the address itself. Please don't include personal details you filled into a form.
Payments
Stripe handles Premium payments, subscription management and invoices. Your card number and other payment details go straight to Stripe; we never see or store them. Stripe tells us your subscription status so we can turn Premium on or off. See the Stripe Privacy Policy for how Stripe handles your data.
Service providers
- Google (Firebase, Google Cloud, Google Sheets): sign-in, storing the account data and feedback described above, and running our server functions. The data is stored in Google data centers in the United States.
- Stripe: payments and subscriptions.
We share your data with no other third party unless the law requires it.
Chrome Web Store User Data Policy
GistFill's use of user data complies with the Chrome Web Store User Data Policy, including the Limited Use requirements: data is used only to provide and improve the features described above, is not transferred to third parties, and is not used for advertising or to determine creditworthiness or for lending purposes.
Retention and deletion
- We keep account data for as long as your account exists, and feedback for as long as it helps us improve GistFill. To delete your account, your feedback and all related data, email us at the address below and we will delete it within 30 days, except payment records the law requires to be kept (held by Stripe).
- Signing out clears the account details cached on your computer.
- You can cancel Premium at any time from Manage subscription in the extension popup.
Children
GistFill is not directed to children under 13, and we do not knowingly collect their data.
Changes
When this policy changes we will update this page and the effective date above. We will point out significant changes in the extension.
Contact
For privacy questions or deletion requests, email natlan.tech@gmail.com.