Privacy Policy

This policy explains how Filly AI collects, uses, and protects personal data. The data controller is Cyrus Group Kft., a company registered in Hungary (EU), reachable at support@getfilly.app. We act as a data controller for your account data, and as a data processor for the client data you choose to store — see our Data Processing Agreement.

1. Data we collect

• Account data: your email address and authentication metadata.
• Billing data: subscription status and Stripe customer/identifier (card details are handled by Stripe; we never see them).
• Your Content: documents you upload and client profile fields you enter — which may include names, contact details, addresses, dates of birth, and sensitive identifiers such as tax IDs, passport numbers, or ID numbers.
• Usage data: basic logs needed to operate and secure the Service.
• Signatures: e-signature images, timestamps, and the signer's IP address and browser, kept as an audit trail.
• Answers saved from forms: when you fill a form for a client, the answers you type in yourself are saved to that client's profile so later forms can be pre-filled. This stores the answer as well as the question, whatever the form asked — so it applies equally to a policy number and to a health question. Values filled automatically by Filly are not saved this way. You can see, edit, and delete everything saved this way on the client's page.

Please do not upload or enter special-category data (e.g. health, biometric, or data revealing racial/ethnic origin) unless you have a valid lawful basis under Article 9 GDPR — this includes answers you type while filling a form, which are saved to the client's profile as described above. Where you upload data about third parties (such as your clients), you are the controller of that data and are responsible for its lawful processing.

2. How we use data

• To provide the Service: analyze documents, autofill forms, generate PDFs, and collect signatures.
• To remember answers you type on a form against that client's profile, so the next form for the same client is pre-filled instead of asking again.
• To process payments and manage subscriptions.
• To send transactional emails (e.g. sign-in links, signature notifications).
• To secure the Service and prevent abuse.

3. Legal basis (GDPR)

We process account and billing data to perform our contract with you, transactional email on the basis of legitimate interest and contract, and we process client data on your instructions as your processor. Where you upload data about third parties, you are responsible for having a lawful basis to do so.

4. Sub-processors

We share data only with providers needed to run the Service:

• Supabase — database, authentication, and file storage.
• Anthropic — AI document analysis and autofill.
• Stripe — subscription billing.
• Resend — transactional email delivery.
• Vercel — application hosting and privacy-friendly, cookieless analytics.
• Mixpanel — product analytics, loaded only with your consent (EU data residency, no IP stored).
• PostHog — product analytics and session replay, loaded only with your consent (EU data residency).
• Google (Google Ads) — conversion measurement for our advertising, loaded only with your consent.
• Reddit (Reddit Ads) — conversion measurement for our advertising, loaded only with your consent.
• Sentry — error monitoring (may process limited technical data, including IP addresses, when an error occurs).

We do not sell personal data. Each provider is engaged under a data processing agreement with appropriate safeguards. Business customers can enter into our Data Processing Agreement.

5. Data retention

We retain Your Content while your account is active. Stored document files are automatically deleted after 12 months of inactivity. You can delete clients, forms, and fills at any time, or permanently delete your entire account and all associated data from Settings → Account → Delete account. On deletion, content is removed from our active systems promptly, subject to short-lived backups and any legal obligations. Note that answers saved to a client's profile from a form live on that client, not on the fill — deleting the fill leaves them in place. Delete them on the client's page, or delete the client, to remove them.

6. Security

Data is encrypted in transit and at rest. Access is restricted by row-level security scoped to your account, and privileged keys are used only on the server. No system is perfectly secure; we work to protect your data using industry-standard measures.

7. International transfers

Our providers may process data outside your country, including the United States, under appropriate safeguards such as Standard Contractual Clauses.

8. Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict processing. To exercise these rights, contact support@getfilly.app. If you are in the EU/EEA, you also have the right to lodge a complaint with your supervisory authority — in Hungary, the National Authority for Data Protection and Freedom of Information (NAIH).

9. Cookies & similar technologies

Essential cookies — required for authentication, security, and keeping you signed in. These are always active and don't require consent.

Analytics — we use privacy-friendly, cookieless usage measurement (Vercel Analytics) that is always on, plus Mixpanel and PostHog product analytics that only load after you accept our cookie banner. Both are configured with EU data residency; Mixpanel does not store your IP address and honors “Do Not Track.” You can decline them in the banner, and declining leaves the Service fully functional.

Session replay — with your consent, PostHog also records a playback of your visit so we can see where the interface is confusing (for example, where people give up on a long form). These recordings are masked in your browser before they are sent: every form input and every piece of text on the page is replaced with placeholder characters. A recording shows the layout, what was clicked, and how far the page was scrolled — it never shows the contents of a document, a client's details, or anything you typed. Decline the banner and nothing is recorded.

Advertising measurement — when you accept the banner, we also load Google Ads and Reddit Ads conversion tracking so we can measure which ads bring people to Filly (for example, whether an ad led to a sign-up). This sets advertising cookies and is used only to measure our own advertising performance. It does not load if you decline, and declining leaves the Service fully functional. We do not sell your data.

10. Contact

For privacy questions or requests, contact support@getfilly.app.