Your documents and spreadsheet data never reach our servers. FillMerge fills PDFs entirely inside your browser, within your Google account. Our backend stores exactly one thing about you: your account identity and credit balance.
| Data | Where it's processed | Stored by us? |
|---|---|---|
| Your PDF templates | Your browser + your Google Drive only | Never |
| Your spreadsheet contents | Your browser + your Google Sheet only | Never |
| Generated PDFs | Your browser; saved to your Drive or downloaded by you | Never |
| Google account identity (user ID, email) | Our servers (EU-hosted) | Yes — to keep your credit balance |
| Usage counts (number of PDFs generated) | Our servers | Yes — free-tier and credit metering |
| Purchase records | Stripe (payment processor) + our servers | Yes — amount, credits, timestamp. We never see your card number. |
FillMerge requests the minimum scopes that make the product work:
FillMerge's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use it for advertising, or let humans read it.
Credit purchases are handled by Stripe. Your card details go directly to Stripe and never touch our servers. We receive a confirmation of the purchase (amount, credits bought) to top up your balance. VAT/sales tax is calculated by Stripe Tax.
Your identity record and purchase history are kept while your account has a balance or recent activity. Email support@fillmerge.com from your Google account's address to have your record deleted; unspent purchased credits are forfeited on deletion unless the purchase is refundable under applicable law.
If you are in the EU/EEA, you can request access, correction, export, or deletion of your data at any time — email support@fillmerge.com. Since we store almost nothing, most requests are simple and fast.
All support and privacy contact is by email: support@fillmerge.com.