WhyFill

Privacy Policy

Last updated: July 25, 2026

Forms ask for personal details, sometimes very personal ones. This policy says exactly what we collect, what we never do, and how to take your data with you or have it deleted.

What we collect

Account email. When you create an account, we store your email address.

Profile answers. The details you type into your profile, such as names, dates of birth, and addresses, so you do not have to retype them for every form.

Form answers. The answers you give while working on a specific form.

Notify-me emails. If you ask us to tell you when a form becomes available, we store your email address and the form you asked about.

Some forms ask about sensitive categories, such as your citizenship or immigration status. We collect only what the form you chose requires.

What we never do

We never sell your data, and we never share it with advertisers or data brokers.

We never store your Social Security number in your profile. When a form needs an SSN, we collect it for that form only, encrypt it, and never reuse it across forms. After you enter it, we only ever show it masked, like •••-••-1234.

How we protect your data

Profile answers are encrypted at rest. Sensitive form values, such as Social Security numbers, are encrypted separately and held to stricter access rules.

No system is perfectly secure, and we will not pretend otherwise. We limit who can access what, we log access, and we design for the worst case.

How long we keep it

We keep your data while your account exists. When you delete your account, we delete your profile data and form answers, except records the law requires us to keep, such as payment receipts.

Who we work with

A small number of vendors help us run the service: Clerk for sign-in, Resend for email, and Stripe for payments when checkout opens. Each one receives only what it needs to do its job.

We do not add vendors casually. If this list changes, this page changes.

Your rights

You can see, export, or delete your data. Use your account settings or contact us, and we will take care of it.

Where privacy laws such as the CCPA or the GDPR apply, you have the rights those laws give you: access, correction, deletion, portability, and the right to complain to a regulator.

Contact

Questions about your data? Reach us through our contact page.

Contact us