Privacy Policy

This Privacy Policy describes how the company publishing iFillPDF (“the Company”) collects, uses and protects the personal data of users (“Users”) of the iFillPDF service (“the Service”), in accordance with the General Data Protection Regulation (GDPR, EU 2016/679) and the French Data Protection Act of 6 January 1978 as amended.

1. Data controller

The data controller is the company publishing the Service, identified in the Legal Notice. For any question regarding your personal data: contact@ifillpdf.com.

2. Data collected

2.1. Data provided by the User

• Identity: last name, first name, email address, profile picture (optional).
• Authentication: hashed password (bcrypt), session tokens, authentication method (email, Google OAuth, Apple Sign-In).
• Professional profile: data pre-filled for forms (address, SIRET, IBAN, etc.) — stored encrypted at rest.
• PDF documents: uploaded files and their content (fields, filled values, signatures).
• Communication: messages exchanged with the AI assistant, content of the contact form.

2.2. Data collected automatically

• Connection data: IP address, user-agent, dates and times of connection, pages visited (via Plausible Analytics, without cookies).
• Payment data: Stripe customer ID, transaction history, subscription status. Full bank details are never stored by the Company — they are managed exclusively by Stripe.
• Audit data: document modification history (who filled what, when, from which IP), for legal traceability purposes.

3. Purposes and legal bases

4. Retention periods

• Account data: for the duration of the contractual relationship, then 3 years from the last contact (commercial prospecting).
• PDF documents: until deletion by the User or deletion of the account. Maximum retention 5 years after last activity, unless requested otherwise.
• Versions and audit trail: 50 versions per document retained, application-level retention.
• Billing data: 10 years (accounting obligation, art. L. 123-22 of the French Commercial Code).
• Connection logs: 12 months (CNIL recommendation).
• Analytics cookies: Plausible does not use persistent tracking cookies.

5. Sub-processors and recipients

The Company uses the following sub-processors, all contractually bound to comply with the GDPR and to implement appropriate safeguards:

iFillPDF does not sell, rent or exchange any personal data with third parties for commercial purposes. The contents of your PDFs are never used to train AI models — Google Gemini and Anthropic Claude are configured in enterprise API mode without retention for training.

6. Transfers outside the European Union

Some sub-processors (Cloudflare, Google, Anthropic, Resend) are established in the United States. Transfers are governed by:

• adherence to the EU-US Data Privacy Framework (adequacy decision of 10 July 2023);
• signature of the Standard Contractual Clauses (SCC) of the European Commission, 2021 version;
• complementary technical measures (TLS 1.2+ encryption in transit, AES-256 encryption at rest).

7. Security

The Company implements technical and organisational measures to protect your data:

• TLS 1.2+ encryption for all network communications;
• AES-256 encryption at rest for the database and stored files;
• two-factor authentication available;
• strong password policy (bcrypt on Supabase side);
• strict data isolation between teams via PostgreSQL Row Level Security;
• regular access auditing and centralised logging;
• employee training on security best practices.

8. Your rights

In accordance with articles 15 to 22 of the GDPR, you have the following rights:

• Right of access: obtain a copy of the data concerning you;
• Right to rectification: correct inaccurate data;
• Right to erasure (“right to be forgotten”): request the deletion of your data;
• Right to restriction: restrict certain processing;
• Right to portability: retrieve your data in a structured and readable format;
• Right to object: refuse processing (notably marketing);
• Right to withdraw your consent at any time, without affecting the lawfulness of prior processing;
• Right to set post-mortem instructions on the fate of your data after your death.

To exercise these rights: contact@ifillpdf.com. A response will be provided within one month (extendable to 3 months in case of complexity). Identity verification may be requested.

In the event of disagreement, you have the right to lodge a complaint with the CNIL: www.cnil.fr — 3 Place de Fontenoy, 75007 Paris, France.

9. Cookies and trackers

9.1. Strictly necessary cookies

The Service uses cookies strictly necessary for its operation (authentication session, CSRF security, language preferences). These cookies do not require prior consent in accordance with CNIL recommendations.

9.2. Audience measurement

We use Plausible Analytics, a privacy-respecting analytics solution that does not use persistent tracking cookies, does not collect individual personal data and is exempt from prior consent within the meaning of CNIL deliberation no. 2020-091.

9.3. No third-party marketing cookies

The Service uses no advertising cookies, cross-site trackers, Facebook Pixel or Google Ads. No data is shared with advertising networks.

10. Recipient of shared documents

When a User shares a document with a third party (“Recipient”) via magic link for signature, the Company collects only:

• the Recipient's email address (provided by the sharing User);
• the values entered in the document fields;
• the IP address, user-agent and date of access to the link (for audit trail in accordance with eIDAS).

The Recipient is informed of this processing when opening the link. The legal basis is the performance of a precontractual contract and the legitimate interest of the sharing User. The Recipient has the same GDPR rights as Users.

11. Minors

The Service is not intended for minors under 15 years of age. No voluntary collection of data concerning them is carried out. If you find that a minor has created an account without parental authorization, contact us at contact@ifillpdf.com for immediate deletion.

12. Modifications to the policy

The Company may modify this policy. Substantial changes will be notified by email to Users at least 30 days before they take effect. The version in force is always accessible at ifillpdf.com/en/privacy.

13. Contact

For any question, exercise of rights or complaint:

• Dedicated GDPR email: contact@ifillpdf.com
• General support: contact@ifillpdf.com
• Postal address: see Legal Notice