Privacy policy

Last updated 26 October 2026

Fill Tool (the web app at fill.ordarr.com and the Fill Tool browser extension) is run by Ordarr. It drafts answers to application questions from information you give it. This page explains what we collect, why, where it goes, and how to delete it. Questions: admin@ordarr.com.

What we collect

• Your account: your email address, and a password if you set one. Used to sign you in.
• Your profile: what you enter or choose to import: name, role, location, the kinds of applications you make, tone preferences, facts, stories, and topics to never mention.
• What Fill Tool learns, only if you switch it on: answers you accept, short notes on how you edit drafts, and facts you type into drafts. You can turn this off and delete any of it on your profile page.
• Your saved applications: when you click Insert in the extension, or Save this application, we keep a copy of that form so you can reread it or download it as a PDF: its address (without the query string), its name, and each question you've answered with your answer. Fields that look like contact, identity or bank details are left out. You can delete any saved application on the My applications page.
• Applications you save to finish later: the same as above, plus the deadline you confirm and how far along the form is (counts only: how many questions, how many answered, how many drafted). The deadline date is stored unencrypted so reminders can be found by date; on its own it doesn't identify you or say what you applied to. Mark one as submitted or delete it on the My applications page.
• Deadline emails: for forms under Due soon we email you a week before, two days before and on the morning of the deadline, and keep a record of which reminders were sent so none is sent twice. Every email has a one-click link to stop them, and you can switch them off or on again on My applications.
• Usage records: when you drafted, which kind of request it was, whether you used the draft, how much you changed it (a count of words, not the text), and how much AI processing it used. We use these to run usage limits, keep costs in check and improve the product. Draft text itself is not kept unless you insert it into a form (as part of that saved application) or accept it with learning switched on.

When you create an account

To keep free use fair, we check that your email address isn't from a temporary-email service and doesn't already have a Fill Tool account (counting Gmail addresses with dots or a "+" tag as the same inbox). The check uses only the address you give us; nothing extra is stored. If you sign in with Google, Google tells us your name and email address and nothing else.

What the browser extension reads

On web pages you visit, the extension looks for long answer fields so it can offer help. Nothing leaves your browser until you ask for a draft. When you do, it sends the question, any instructions shown with it, any text already in that field, the answers you've already typed into other questions on the same form (skipping fields that look like contact or identity details, such as email, phone or ID numbers), and the page's address without its query string. The extension never submits forms; it only fills in text when you click Insert. When you click Finish later, it also looks in the page's text for a deadline (such as "Applications close 30 November") for you to confirm.

Importing documents and AI chat history

If you import a document (such as a CV) or paste text, it is sent to our AI provider to suggest facts and stories, and is not stored. Only the items you tick are saved. If you import an exported AI chat history, the file is read in your browser: only your own messages that appear to describe you or your work are sent, each with its conversation's title, the assistant's replies and everything else stay on your computer, and the file itself is never uploaded.

If you use Google Drive (to import a file, or to save a filled application there), Google asks you to let Fill Tool use files you pick and files it makes. That is Google's narrowest Drive permission: we can't see, list or change anything else in your Drive. To import, your browser downloads only the files you pick, straight from Google, and it is then handled like an uploaded document. To save, your browser makes the PDF and uploads it straight to a "Fill Tool applications" folder in your Drive. Neither goes through our server, the access is held only in your open browser tab, and we never store anything we get from Google Drive other than the facts and stories you choose to save. You can remove Fill Tool's access at any time in your Google Account, under Security, "Your connections to third-party apps & services". Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

Who processes your data

• Supabase stores your account and profile in a database in the EU (Stockholm, Sweden).
• Cloudflare hosts the web app and our server, and stores our encrypted database backups. Like any web host, it handles technical data such as IP addresses to deliver pages and requests.
• Anthropic provides the AI (Claude) that writes drafts and reads imports. It receives the request content described above, together with the parts of your profile needed to answer, and processes it under its commercial terms, which do not allow it to train its models on this data.
• Resend sends our deadline reminder emails, from the EU (Ireland). For each email it receives your email address, the application's name, its deadline and the link back to the form.

We don't sell your data, show ads, or use tracking or analytics cookies.

How we protect it

Everything you give Fill Tool, and everything it learns about you, is encrypted in our database with a key held separately from it: your name, role and location, your facts and their labels, your stories and their titles, your saved answers and the questions they answered, your saved applications, your never-mention topics and the notes on how you write. Every request is checked so that you can only reach your own data. Connections from your browser and the extension are encrypted (HTTPS only).

What's stored in your browser

The web app and the extension keep your sign-in session in browser storage so you stay signed in. The extension also keeps the questions found on the open tab and your drafts in progress, which are cleared when you close the browser. If you start a form (type in a long answer or open a Fill Tool card) and leave it without submitting it, the extension remembers that form's name and address in your browser only, so it can remind you; nothing is sent to us unless you choose Add to Due soon, and you can dismiss it. It also remembers where you moved the Fill Tool mark on each site. We don't use cookies.

Keeping and deleting your data

We keep your data while you have an account. You can edit or delete any fact, story, note or saved answer on your profile page at any time. Delete my account on the profile page permanently deletes your account and everything linked to it. You can also email admin@ordarr.com to ask for a copy of your data, a correction, or deletion.

So that deleting an account and signing up again can't reset the monthly limits, we keep one small record for 30 days after a deletion: a scrambled fingerprint of your email address (it can't be turned back into the address), how many drafts and imports you used that month, and whether the account was paused. Nothing else. It is then deleted automatically.

We keep encrypted backups of the database for 30 days, in case something goes wrong. Deleted data leaves the backups as they expire, within 30 days.

Children

Fill Tool is not meant for children under 16.

Changes

If we change this policy, we'll update the date above, and tell you in the app if the change is significant.