FormFillPilot privacy notice

Last updated: 16 September 2026

FormFillPilot is a browser extension by MicroCity Solutions Ltd(trading as Microcity Labs), company number 17103353, England & Wales. It fills job application forms from your own documents and shows you every answer before anything is typed. You press submit; the extension never does. This notice says what it reads, what its server keeps and how to remove it. It sits alongside our general Privacy Policy.

1. What you give us, and what becomes of it

• Your documents (CV text you paste, PDF, Word or text files you choose, a photo of a certificate): they are read once by the FormFillPilot engine and turned into a structured profile - name, contact details, work history, education, skills, and the facts you wrote (notice period, salary expectation, right to work). The profile is kept on our server under your key. The raw documents are not stored.
• The CV file for “attach your CV” fieldsstays in your own browser storage; it is handed to the page’s upload field when a form asks for it and never uploaded to our server.
• The form you are filling: the labels, types and option lists of its fields, and the visible text of the job page (title, description) are sent to our server so the answers can be planned. They are not stored beyond a session log that keeps the site address, the page title, the number of fields and how long the fill took.
• Answers you accept (free-text answers to screening questions) are remembered under your key so the next application with the same question needs no new work, and so a wording used before can be rephrased. They are yours to delete (section 5).
• A screenshot of the form is taken only when the page reads thin (fewer than four fields found) and is used once to spot fields the reader missed. It is not stored.

2. Your key and your credits

FormFillPilot has no account and no password. A key identifies you; it is stored in your browser and, if you bought a pack, it is linked to the e-mail Paddle sends us with the purchase. Credits (applications) are counted on our server against the key. Purchases are one-time; we keep the Paddle transaction id and the number of applications bought, nothing about your card.

3. Who processes the data

• Our server in the United Kingdom (Hostinger) runs the FormFillPilot engine and keeps the profile, the remembered answers, the session log and the credit balance.
• Language-model providers(via OpenRouter) receive the text needed to build the profile and to plan answers - the documents you gave, the form’s labels and the job page text. They process it to return the answers; we do not use providers that train on this data.
• Paddle (Merchant of Record) handles payment, invoices and taxes for credit packs.

Nothing is sold, shared for advertising, or used for anything but filling the forms you open.

4. What the extension can see in your browser

The extension reads and fills form fields only on the page where you opened its panel (toolbar click, Alt+Shift+F, or the right-click item “fill this field”), including forms inside embedded frames on that page. It does not read your browsing history, other tabs, passwords or cookies, and it never submits a form.

5. Keeping, deleting, your rights

• Your profile, remembered answers and session log stay until you delete them or ask us to.
• To delete everything held under a key, e-mail contact@microcitylabs.com from the address you used, or paste the key in the message. We delete within 7 days and confirm.
• Under the UK GDPR you can ask for a copy of what we hold, correct it, or object to processing. Same address. Our registered office and legal contact are on the Legal page.

6. Changes

When this notice changes, the date at the top changes and the extension’s store listing points to the new text.