Privacy Policy for Fillvyn
Fillvyn is architected on a zero-knowledge, privacy-first model. Your candidate profiles, resume embeddings, and form inputs remain completely under your control on your local device.
Foundational Security Commitment
Zero Cloud Trackers • Local-First Storage
We do not run centralized databases that harvest user resumes or job applications. All automated form filling, resume chunking, and reasoning logic execute either on your own hardware via local Ollama or directly through client-side API calls with your private keys.
1. Local Storage on Your Device
All profile information—including your full name, phone number, email address, portfolio links, GPA, and employment history—is stored solely within the encrypted browser storage area (chrome.storage.local).
- Data is never transmitted to Fillvyn servers (we operate no telemetry backends).
- When exporting profile backups, data is encrypted locally using the Web Crypto API with standard AES-GCM-256 encryption.
2. AI Synthesis & Model Execution
Fillvyn provides two distinct modes for AI reasoning and answer generation:
Form questions and RAG resume chunks are processed directly on your local CPU/GPU using on-device models. Zero data packets leave your machine.
If you choose Google Gemini, OpenAI, or Anthropic, prompts are sent directly from your browser to the respective provider using your personal API key stored in your local browser.
3. Zero Telemetry, Trackers, or Analytics
The Fillvyn extension contains zero tracking pixels, Google Analytics tags, session replay scripts, or advertising SDKs. We do not track the URLs you visit, the forms you fill, or the candidates you configure.
4. Form DOM Interaction & Sanitization
Fillvyn interacts with web pages exclusively when you trigger the autofill action (Alt + Shift + F) or open the floating dock on supported form URLs (Google Forms and Microsoft Forms). All synthesized content is strictly sanitized before DOM injection to eliminate cross-site scripting risks.
5. User Data Rights & One-Click Purge
You retain complete ownership over all stored profiles and RAG files. You can delete individual profiles or perform a complete, irreversible wipe of all extension data directly from the Extension Options page with a single click. Uninstalling the extension removes all local data automatically.
6. Questions & Privacy Inquiries
If you have questions about this Privacy Policy, compliance inquiries, or need support with local encryption keys, please reach out to our team.