✨ Fyltr

Privacy Policy

Last updated: 2 September 2025

1. Introduction

Welcome to Fyltr("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered form building platform.

Important: This platform is designed specifically for document extraction and form building purposes. We do not use your data for any other purposes beyond what is necessary to provide our core services.

2. Information We Collect

Personal Information

  • • Email address and name when you create an account
  • • Payment information for subscription billing (processed securely by Stripe)
  • • Profile information you choose to provide

Service Usage Information

  • • Forms you create and their configurations
  • • Form responses and submitted data
  • • Documents uploaded for AI-powered extraction
  • • Basic analytics about form performance (response counts, access logs)

AI Processing Data

  • • Documents and images you upload for AI extraction
  • • Extracted data from your documents (stored only for your use)
  • • AI processing logs for service improvement (no personal content retained)

3. How We Use Your Information

We use your information strictly for the following purposes:

  • • To provide our core form building and document extraction services
  • • To process payments and manage your subscription through Stripe
  • • To send important account and service updates
  • • To provide customer support for our services
  • • To improve our AI extraction algorithms and platform functionality
  • • To comply with legal obligations

We do NOT:

  • • Sell, trade, or monetize your personal data
  • • Use your data for advertising or marketing purposes
  • • Share your documents or extracted data with third parties
  • • Use your data for purposes unrelated to our services

4. Data Processing and AI Services

Our platform uses AI services to extract structured data from your documents. Here's how this works:

  • Document Upload: When you upload documents, they are temporarily processed by our AI extraction service
  • AI Processing: We use OpenAI's GPT models to extract relevant information from your documents
  • Data Storage: Only the extracted structured data is stored in our database, not the original documents
  • No Training: Your documents are not used to train AI models or improve extraction for other users
  • Secure Processing: All AI processing is done through secure, encrypted channels

The AI extraction is purely functional - it helps you convert unstructured documents into usable form data. We do not retain or analyze your documents for any other purpose.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encryption of data in transit and at rest, regular security assessments, and access controls.

Your documents and extracted data are stored securely in our cloud infrastructure with industry-standard encryption and access controls. We regularly review and update our security practices to maintain the highest level of data protection.

6. Data Sharing and Third-Party Services

We do not sell, trade, or otherwise transfer your personal information to third parties except in the following limited circumstances:

  • Stripe: For secure payment processing (no document data shared)
  • Supabase: For secure database storage and authentication
  • OpenAI: For AI-powered document extraction (documents are processed but not stored by OpenAI)
  • Cloudflare R2: For secure file storage (encrypted at rest)
  • Vercel: For hosting and basic analytics (no personal content)
  • • When required by law or to protect our rights

Important: Your documents and extracted data are never shared with any third-party services except for the specific AI processing required to provide our extraction services. All third-party services are bound by strict data protection agreements.

7. Your Rights and Data Control

You have the right to:

  • • Access and update your personal information through your account settings
  • • Export your form data and responses in CSV format
  • • Delete individual forms and responses you've created
  • • Opt out of non-essential communications
  • • Request correction of inaccurate information
  • • Contact us to request deletion of specific data

Note: While we don't currently offer automated account deletion, you can contact us at privacy@fyltr.co to request deletion of your account and associated data. We will process such requests within 7 days.

8. Data Retention and Deletion

We retain your data only as long as necessary to provide our services:

  • Account Data: Retained while your account is active
  • Forms and Responses: Retained until you delete them or close your account
  • Uploaded Documents: Processed immediately and deleted after extraction
  • Extracted Data: Stored in your account until you delete it
  • Payment Information: Retained by Stripe according to their policies

When you delete forms or responses, the data is permanently removed from our systems. If you close your account, we will delete all associated data within 30 days.

9. Cookies and Tracking

We use essential cookies strictly necessary for our service to function. Examples include session security, CSRF protection, and short‑lived tokens for file uploads.

Public forms accessed at /f/[slug] do not use analytics or advertising cookies. These pages operate with essential cookies only and do not show a cookie consent banner.

Within the main dashboard application, we use Vercel Analytics to understand how users interact with our platform. These analytics cookies are only enabled after consent and you may decline them. Your consent preference is stored locally in your browser and remains valid for 12 months, after which you will be asked to renew your consent.

When you visit our dashboard, you'll see a consent banner allowing you to accept all cookies or choose "Only essential" to decline analytics cookies. Your choice is immediately applied and respected across all dashboard pages. No analytics scripts will load if you decline consent.

You can control cookie preferences through your browser settings at any time.

10. Contact Us

If you have any questions about this Privacy Policy, our data practices, or would like to exercise your data rights, please contact us at privacy@fyltr.co

We are committed to responding to your privacy inquiries within 48 hours and will work with you to address any concerns about your data or our privacy practices.