Privacy Policy

Data we process

Account and billing details you provide; the CSV "lead" data you upload (which may contain personal data of your contacts); and operational logs. We do not sell your data.

Roles

For your account data we are a controller. For the lead data you upload and submit, you are the controller and FillWright acts as your processor under a Data Processing Agreement (DPA).

Sub-processors

• Stripe — payment processing.
• Anthropic — optional AI assistance for form-field mapping (no submission is auto-executed by AI).
• Smartproxy — regional network egress, only when you enable it for an authorized target.
• Hosting / email infrastructure providers.

Retention & deletion

You can delete a dataset and everything derived from it (rows, runs, submissions) at any time from your dashboard. [Retention periods for account/billing/logs to be finalized by counsel.]

Security

Encryption in transit, hashed passwords (Argon2id), mandatory 2FA for money actions, rate limiting, and access controls. See our bot policy for how our automation respects target sites.

Your rights

Access, rectification, erasure, and portability. [Contact and DPO details to be added.]