Terms of Service

Fillall ("we", "us") is a service for filling PDF forms in bulk. You pick a form — from our versioned library of government and business forms, or a PDF you upload yourself — provide the data as typed records, a spreadsheet, or API calls, and we render one finished PDF per row. The same functionality is available through the website and through a REST API.

By creating an account or using the service you agree to these terms. If you use Fillall on behalf of an organization, you represent that you have authority to bind that organization, and "you" means the organization.

You sign in with Google or with an email address and password. You are responsible for keeping your credentials and API keys confidential and for all activity under your account. Tell us promptly at support@fillall.io if you believe your account or a key has been compromised — API keys can be revoked immediately from your dashboard.

At first sign-in your account is pinned to a home data region. All of your form data is processed and stored in that region (see the Privacy Policy for where that is today). Changing region is a support request, not self-serve.

You may only submit data you have the legal right to process. If you fill forms on behalf of clients or employees, obtaining any consent or legal basis their data requires is your responsibility.

You must not:

• use the service to produce fraudulent, forged, or deceptive documents;
• attempt to access other customers' data or probe the service's security;
• circumvent rate limits, quotas, or plan restrictions;
• resell the service itself (filling forms for your own clients is fine — repackaging Fillall as your product is not, without a written agreement).

The data you fill into forms stays yours. For that data, you are the controller and Fillall is a processor acting on your instructions. How we handle it — including our plain-words explanation of what is stored where and for how long — is set out in the Privacy Policy, and our processor commitments are in the Data Processing Addendum. The vendors we rely on are listed on the Subprocessors page.

Two commitments worth stating in the terms themselves: your form-fill data is never used to train AI models and is never sent to AI providers (AI is used only to analyze the structure of blank form documents), and spreadsheet cell values are never written to our database — they are read row-by-row in memory during rendering.

The library contains form templates prepared from documents published by government agencies and other issuers. Each form is versioned; a version's base PDF and spreadsheet templates are frozen together so the same inputs always produce the same output.

We work to keep the library accurate and current, but the issuing authority's own published form is always authoritative. You are responsible for verifying that a filled form is the right version, correctly completed, and acceptable to the body you file it with. Fillall provides document preparation tooling, not legal, tax, or immigration advice.

Paid plans are billed through Stripe; we never see or store your full card details. Plans carry monthly quotas (such as PDFs exported and API calls) and a retention window for generated files. Usage is metered per billing period. If you cancel, your plan runs to the end of the paid period.

We may change plan pricing or limits with notice; changes take effect at your next billing period.

API keys are bearer secrets: anyone holding a key can act as your account within that key's permissions. Keep them out of source control and client-side code. You can restrict a key to specific IP ranges and revoke it at any time from your dashboard. Creating a key requires accepting these Terms and the Data Processing Addendum; we record that acceptance.

API traffic is rate-limited and metered against your plan. We may throttle or suspend keys that endanger service stability or breach these terms. Test-mode keys create real, isolated data for integration work and are not billed.

In short (the full table is in the Privacy Policy):

• Records you save persist until you delete them. Deleted records sit in a recycle bin for 30 days, or are removed immediately if you purge them.
• Generated PDFs and uploaded data files are automatically deleted after your plan's retention window (24 hours to 30 days by plan).
• The instant-fill API stores nothing: your data goes in, a PDF streams back, nothing is written to storage.

When your account is closed, we delete your form data and remaining files; billing and audit records are retained as required for legal and accounting purposes.

The service is provided "as is" and "as available". To the maximum extent permitted by law, we disclaim implied warranties of merchantability, fitness for a particular purpose, and non-infringement, and our aggregate liability arising out of the service is limited to the amounts you paid us in the twelve months before the claim. Nothing in these terms excludes liability that cannot be excluded by law.

Draft note: this section in particular is placeholder language pending legal review; the final allocation of liability will be set by counsel.

You can stop using Fillall and request account deletion at any time from your account page. We may suspend or terminate accounts that materially breach these terms, with notice where practical. On termination, the retention and deletion rules in section 08 apply.

We may update these terms as the service evolves. Material changes will be announced on the site (and by email for material changes affecting paid plans or the API) with reasonable notice before they take effect. The version identifier at the top of this page changes whenever the text does.

Questions about these terms: support@fillall.io.