FormFillPilot privacy notice

Last updated: 14 October 2026

FormFillPilot is a form filler by MicroCity Solutions Ltd (trading as Microcity Labs), company number 17103353, England & Wales. It fills web forms with its web version (a bookmark you click on the form’s page), and fillable PDF forms on its PDF forms page, from your own documents, and shows you every answer before anything is typed or written. You press submit; FormFillPilot never does. This notice says what it reads, what its server keeps and how to remove it. It sits alongside our general Privacy Policy.

1. What you give us, and what becomes of it

• Your documents (CV text you paste, PDF, Word or text files you choose, a folder, a company sheet, a photo of a certificate), added on the PDF forms page: they are read once by the FormFillPilot engine and turned into a structured profile - name, contact details, work history, education, skills, business details and the facts you wrote (notice period, salary expectation, right to work, VAT number, delivery days). The profile is kept on our server under your key. The raw documents are not stored.
• Upload fields (“attach your CV”) are left for you: the web version attaches no file.
• The form you are filling (on the page where you clicked the bookmark): the labels, types and option lists of its fields, the table headers around them, and the visible text of the page (title, description, instructions) are sent to our server so the answers can be planned. They are not stored beyond a session log that keeps the site address, the page title, the number of fields and how long the fill took.
• Answers you accept (free-text answers to questions, facts you typed in the mirror) are remembered under your key so the next form with the same question needs no new work, and so a wording used before can be rephrased. They are yours to delete (section 5).
• A PDF form you choose on the PDF forms page is uploaded to our server, read and filled there, and kept at most 30 minutes, together with its filled copy; then both are deleted. “Forget now” on the page deletes them at once, and choosing another PDF deletes the previous one. We keep no file name and no value; only counts (fields, pages, how long it took), and a short code computed from the file so the same blank form is recognised again. For the boxes the built-in form rules do not answer, only the box names, a picture of that page and your profile details are sent to the language-model provider to plan the answers, as for a web form. Answers you type into the page yourself are remembered under your key like accepted answers on web forms, except identity numbers and dates of birth. The filled PDF is sent nowhere: you download it.

2. Your key and your AI usage bar

FormFillPilot has no account and no password. A key identifies you; if you bought, it is linked to the e-mail of the purchase. In the web version you paste it into the small FormFillPilot box, a frame served by formfillpilot.com: your browser keeps it in that box’s own storage, which the site you are on cannot read, once per site. The free applications and the AI usage bar are counted on our server against the key. Purchases are one-time; we keep the payment provider’s transaction id and what was bought (the base plan or a refill), nothing about your card.

3. Who processes the data

• Our server in the United Kingdom (Hostinger) runs the FormFillPilot engine and keeps the profile, the remembered answers, the session log and the AI usage balance.
• Language-model providers (via OpenRouter) receive the text needed to build the profile and to plan answers - the documents you gave, the form’s labels and the page text, and for a PDF form a picture of the page being planned. They process it to return the answers; we do not use providers that train on this data.
• Stripe (merchant of record on formfillpilot.com) and Paddle (merchant of record on microcitylabs.com) handle payment, invoices and taxes for the base plan and the refills.

Nothing is sold, shared for advertising, or used for anything but filling the forms you open.

4. What the web version can see in your browser

The web version runs only when you click its bookmark, and only on that page: it reads and fills the form fields there and reads the page’s visible text. It does not read your browsing history, other tabs, passwords or cookies, and it never submits a form. Leaving or reloading the page ends it. When you click the bookmark, its script and the FormFillPilot box are loaded from formfillpilot.com into the page you are on.

5. Keeping, deleting, your rights

• Your profile, remembered answers and session log stay until you delete them or ask us to.
• To delete everything held under a key, e-mail contact@microcitylabs.com from the address you used, or paste the key in the message. We delete within 7 days and confirm.
• Under the UK GDPR you can ask for a copy of what we hold, correct it, or object to processing. Same address. Our registered office and legal contact are on the Legal page.

6. Changes

When this notice changes, the date at the top changes.