Privacy policy

What stays on your device

Your PDFs, filled answers, templates and saved signatures, and, if you allow it, your editor preferences (such as the AI quality you last chose), are stored in this browser’s IndexedDB for this site. They are not synchronized between devices, and formaster.app does not receive them during ordinary editing, saving, or export.

Clearing the site’s data in your browser removes them. You can also remove your documents, templates, signatures and saved settings at once with the button at the bottom of this page.

What formaster.app collects

Nothing about your documents. About you, only what your account needs: you sign in to a formaster.app account to use the app.

If you create an account, formaster.app saves in its database (Google Firebase): your account ID, your email address, your name and profile picture if you sign in with Google, when you created the account and when you last used it, how many AI credits you have spent this month (or this year, on a yearly plan), a short note of the AI work you paid credits for, one for each page or batch of labels (when it began, what kind of work, which quality, and how many requests and credits it came to; nothing of the page itself), and, if you subscribe, your Paddle subscription ID with its status, when it began, the dates it renews or ends, and which plan it is. It saves no PDFs, templates, answers, signatures or pictures of your pages, and it never sees your card details. A password you choose is held by Firebase Authentication in a form formaster.app cannot read.

formaster.app’s server uses your Paddle subscription ID only to ask Paddle whether the subscription is active, or to cancel it when you ask; signed billing notifications also keep its status current. When you restore a subscription, its account ownership is checked on the server. formaster.app has no analytics or advertising scripts, and no tracking. Like any website, the server that delivers formaster.app’s pages may keep ordinary technical logs (such as your IP address and browser type) under its operator’s own policies.

Cookies and similar storage

formaster.app’s own code sets no cookies, and uses nothing for tracking or advertising. It keeps some information in this browser’s storage (IndexedDB and localStorage) instead, which this policy treats the same way as cookies. Some of it is needed for formaster.app to work, so you are not asked about it. The rest is off until you say yes.

• Needed, always on: your sign-in (Firebase Authentication keeps it in this browser until you sign out); your PDFs, answers, templates and saved signatures (IndexedDB, on this device); and your answers to the cookie question, which version of these policies you last saw, and the display settings you choose under “Accessibility settings” (localStorage).
• Optional, “Remember my editor settings”: the AI quality you last chose and whether fields are highlighted, kept in IndexedDB on this device. If you turn it off, the defaults are used each visit and what was saved is deleted.
• Optional, “Load Paddle for subscribing”: Paddle Checkout is loaded from cdn.paddle.com only if you allow it, here or at the moment you subscribe. Paddle then receives your IP address and browser details and may set its own cookies, under its own privacy policy.

Your cookie choices

The first time you visit, formaster.app asks you to accept all, reject all or customize. Rejecting is as easy as accepting, and nothing optional is used before you answer. Your answer is remembered in this browser, so clearing the site’s data means you will be asked again.

You can change your choices at any time with “Cookie settings” in the footer of the main pages, on the sign-in page or in the editor’s menu, or with the button below. Turning something off deletes what it saved.

AI requests

AI placement is optional. When you run it, your browser sends the following to formaster.app’s server, which passes it to the AI provider formaster.app uses, using a key that only the server holds, and sends the provider’s answer back to you. formaster.app does not store any of it: its logs hold only a note that a request was made (what kind and which quality, how long it took, how it went, how many credits it cost and how many tokens it used), and the only record kept is the note of the credits spent.

• a picture of the page, drawn from your PDF, with the ruler and field boxes the AI needs;
• the page’s printed text and where each piece sits, and the lines, cells and boxes found on it;
• the names and answers of the fields already on your form, and the names of fields on other pages;
• what you typed into the AI panel as instructions.

Hiding parts of a page from the AI

Before an AI request, you can choose areas of a page to hide. Hidden areas are painted solid black on the picture before it leaves your device, the printed text under them is removed from what is sent, and the names and answers of fields that sit in them are left out. The page’s other text, and what the model can infer from what is left, still go to the provider.

“Find sensitive text” looks in each page’s text for things that look like email addresses, phone numbers, and long ID, account or card numbers. It is a convenience, not a guarantee: it reads text only, so it cannot see text inside a scanned image, and it can miss things. Check the page yourself, and hide anything it missed by hand. Hidden areas are saved with your template so you don’t have to redo them. They do not affect exported PDFs.

Hiding does not protect what you type into the instructions box. Do not put anything there you would not send to the provider.

Form language translation

If you ask for a form’s labels to be shown in another language, formaster.app sends the form’s labels to its server, which passes them to the AI provider for translation: field names, sections and choices, who completes each part, table and column names, attachment descriptions, and the names of the editor’s own buttons. It does not send your answers or the PDF.

Retention and your choices

Local data remains until you delete it in the app, delete your local data with the button below, or clear the site’s data in your browser. The button below does not remove your sign-in, your cookie choices or your accessibility settings, so that the page stays usable; clearing the site’s data in your browser removes those too. You can use formaster.app fully without AI, but you need to be signed in to an account.

Your account record, your credits and the notes of the AI work you paid for, and your subscription records remain until you delete your account. While you are signed in, “Delete your account” appears at the bottom of this page; it removes all of them from formaster.app’s database and removes your sign-in. It is refused while Paddle could still bill you, so cancel an active subscription first. Paddle keeps its own records of payments, under its own policy.

What the AI provider has received from formaster.app’s server is under that provider’s control and retention policy. formaster.app cannot delete it for you, and does not know who it came from; contact the provider if that matters to you.

Third parties

The third parties that receive information because of formaster.app are the AI provider (which receives what you send when you use the AI), Google (because you sign in) and, if you allow it and choose to subscribe, Paddle. Google runs the sign-in and the database (Firebase) under its own privacy policy, and is contacted when you sign in and while you stay signed in, not for the documents you edit. Paddle Checkout is loaded from cdn.paddle.com only when you have allowed it, and Paddle handles your payment under its own privacy policy.

Changes to this policy

This policy may be updated as features change. The date at the top of this page shows the latest revision, and the next time you visit after a change formaster.app shows a notice that the policies were updated, until you dismiss it. Please read it from time to time.