AI Form Filler — Privacy Policy

1. Summary

• SoftForge Digital does not operate any server for this Extension and never receives, stores, or sees your data.
• Your API keys, profile text, and history are stored locally on your device.
• When you trigger a fill, the relevant field/page content is sent directly from your browser to the AI provider you selected (OpenAI, Anthropic, Google, or a local model you run).
• There is no analytics, advertising, tracking, or telemetry of any kind.

2. Data the Extension collects and processes

The Extension processes the following categories of data, only when and as needed to perform a fill you request:

• AI provider credentials: the API key (or local server URL) you enter for OpenAI, Anthropic, or Google Gemini. Stored locally; used only to authenticate your own requests to that provider.
• Profile / persona text: optional text you save (e.g., name, brand voice, links) to give the AI context. Stored locally.
• Page and form content: when you invoke a fill, the Extension reads the label and current value of fields on the page, any text you explicitly select as context, and the page title and URL, and includes them in the prompt sent to the provider.
• Generated text: the value returned by the provider, which is written into the field.
• Local history: for each fill, the Extension stores the field label, generated text (or error), provider name, the site's host, and a timestamp.

3. How the data is used

The data is used only to provide the Extension's stated function. It is never used for advertising, profiling, or sold.

• To generate a suitable value for the field you asked to fill, using the page/profile context.
• To display your recent fills in the Extension's options page (history).
• To remember your provider, model, key, and profile settings between sessions.

4. Who the data is shared with (third parties)

The Extension transmits data only to the AI provider you choose, and only the content needed to generate the requested value (the field/context content, page title and URL, your profile text, and your API key as the authorization credential). This transmission goes directly from your browser to that provider over HTTPS. SoftForge Digital is not an intermediary and does not receive a copy.

Depending on which provider you select, your data is shared with one of the following, and their handling of it is governed by their own privacy policies:

• OpenAI, L.L.C. — api.openai.com — when you select OpenAI. Privacy policy: https://openai.com/policies/privacy-policy
• Anthropic, PBC — api.anthropic.com — when you select Anthropic (Claude). Privacy policy: https://www.anthropic.com/legal/privacy
• Google LLC — generativelanguage.googleapis.com — when you select Google Gemini. Privacy policy: https://policies.google.com/privacy
• A local AI server you run yourself (e.g., Ollama, LM Studio) — when you select the Local option, data is sent only to the address you configure on your own machine or network, and to no third party.

5. Where data is stored, and retention

• Settings (provider, model, API key, profile) are stored using chrome.storage.sync. If you are signed into Chrome, this means they may sync across your own Chrome browsers through your Google account; otherwise they stay on the local device.
• History is stored using chrome.storage.local on the device only, limited to your most recent 100 fills.
• SoftForge Digital stores none of this data — there is no server, database, or backup operated by us.
• Data is retained until you delete it (clear history, remove your key/profile) or uninstall the Extension, which removes all of its locally stored data.

6. Your choices and controls

• View or clear your fill history at any time from the options page.
• Remove your API key and profile text at any time.
• Choose the Local provider to keep all processing on your own machine with no third party involved.
• Uninstalling the Extension permanently deletes all of its locally stored data.

7. Security

API keys and settings are stored using the browser's extension storage and are transmitted only to your chosen provider over encrypted HTTPS connections. Because keys are sensitive, treat them like passwords and remove them if your device is shared.

8. International transfers

If you use a cloud provider, the content of your request may be processed on servers located in countries other than your own, according to that provider's infrastructure and privacy policy. Choosing a local model keeps all processing on your own device.

9. Children

The Extension is a general-purpose productivity tool and is not directed to children under 13 (or the minimum age of digital consent in your country).

10. Changes to this policy

We may update this policy as the Extension evolves. Material changes will be reflected on this page with an updated date above.