Your documents and spreadsheet data never reach our servers. FillMerge fills PDFs entirely inside your browser, within your Google account. Our backend stores exactly one thing about you: your account identity and credit balance.
| Data | Where it's processed | Stored by us? |
|---|---|---|
| Your PDF templates | Your browser + your Google Drive only | Never |
| Your spreadsheet contents | Your browser + your Google Sheet only | Never |
| Generated PDFs | Your browser; saved to your Drive or downloaded by you | Never |
| Google account identity (user ID, email) | Our servers (EU-hosted) | Yes — to keep your credit balance |
| Usage counts (number of PDFs generated) | Our servers | Yes — free-tier and credit metering |
| Purchase records | Stripe (payment processor) + our servers | Yes — amount, credits, timestamp. We never see your card number. |
FillMerge requests the minimum scopes that make the product work:
FillMerge's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use it for advertising, or let humans read it.
PDF pack purchases are handled by Stripe. Your card details go directly to Stripe and never touch our servers. We receive a confirmation of the purchase (amount, PDFs bought) to top up your balance. Prices are shown in EUR; the amount shown is the amount charged.
Your identity record and purchase history are kept while your account has a balance or recent activity. Email [email protected] from your Google account's address to have your record deleted; unused PDFs from purchased packs are forfeited on deletion unless the purchase is refundable under applicable law.
If you are in the EU/EEA, you can request access, correction, export, or deletion of your data at any time — email [email protected]. Since we store almost nothing, most requests are simple and fast.
All support and privacy contact is by email: [email protected].