Privacy Notice

Effective as of August 24, 2026
Overview
This Privacy Notice explains how Botmakers LLC d/b/a Instafill.ai ("Instafill," "we," "us," or "our") collects, uses, and protects your information when you use our websites, mobile applications, APIs, and related products or services (collectively, the "Services").
Instafill.ai is an AI-powered document automation platform that converts and fills PDF and Word forms. We respect your privacy and are committed to transparency about how we process your information. This Notice also describes your choices and rights regarding your personal information.

NOTICE OF COLLECTION

Collection of Personal Information
The information we collect depends on your relationship with us and the Services you use.
  • Documents and Uploaded Files: We store and process the forms and documents you upload to your account solely to provide the Services. Occasionally, we may review blank or empty versions of uploaded forms to understand field layout and improve AI recognition accuracy. These reviews never involve filled-in or personal data.
  • Contact and Account Information: Name, email address, company name, and related account details.
  • Commercial Information: Billing details, subscription level, and transaction records.
  • Usage Information: Log data, browser and operating system type, IP address, device identifiers, pages viewed, and interaction history.
  • Submitted Information: Any information you send us voluntarily, such as feedback, questions, or support requests.
  • Sales Inquiries: When you send the form on our contact page we collect the email address you enter and, where you choose to give them, your first and last name, phone number, and the message you write. You do not need an account to send one. We keep it in order to answer you and to know how many people are asking.
  • Integration and API Data: Information received via connected services or webhooks (e.g., Cognito Forms, n8n, or email automations) that you authorize Instafill to process.
We do not sell personal information or use sensitive personal information for profiling or behavioral advertising.
Use of Personal Information
We use your information to:
  • Provide and improve our Services: Process your uploaded documents, fill forms accurately, and fix layout issues when forms are misrecognized.
  • Respond to you: Manage your account, communicate about your subscription, respond to inquiries, and provide support.
  • Operate safely and compliantly: Detect fraud, enforce terms, and meet legal or regulatory obligations.
  • Conduct marketing and education: Notify you about product updates, new features, or case studies that may interest you. You can opt out anytime.
  • Publish case studies and success stories: We may occasionally publish user or company success stories describing how Instafill.ai is used. These may reference company names or use cases but will never include personal data, uploaded documents, or confidential information. You may request anonymization or exclusion at any time.
How We Collect Information
Directly from you

When you create an account, upload or fill out documents, subscribe to communications, contact support, or send the form on our contact page.

Automatically

Through cookies, analytics, and log tools (e.g., Azure Application Insights, Cloudflare). These help us understand performance, detect abuse, and improve user experience.

From integrations and partners

Through third-party systems you connect to Instafill (e.g., form builders, workflow tools, or enterprise connectors) and business partners assisting with onboarding or analytics.

Combining information

We may combine information from multiple sources to provide and improve our Services.

MCP Server Integration (Instafill MCP)
If you connect the Instafill.ai MCP server, it can access your Instafill.ai workspace using an OAuth access token that contains a workspace-scoped Instafill.ai API key. The MCP tools may request or process form IDs, session IDs, file URLs, profile IDs, text notes, and uploaded PDF files to list and search forms, retrieve form metadata and field data, create autofill sessions, check fill session status, retrieve filled form data as JSON, and upload new forms.
When you use the upload form feature, your client may share coarse location and basic browser/device information as part of the upload context. Instafill.ai uses this information only for security, abuse prevention, and troubleshooting, and does not use it for advertising or cross-service tracking.
When you use the upload form feature, your client may share coarse location and basic browser/device information as part of the upload context. Instafill.ai uses this information only for security, abuse prevention, and troubleshooting, and does not use it for advertising or cross-service tracking.
Audit Logging: For security, troubleshooting, and abuse prevention purposes, we maintain audit logs of MCP tool usage. These logs include your user ID, email address, name, the specific tool action performed (e.g., list_forms, fill_form), timestamp, and operation status. Audit logs do not contain the actual content of your forms or filled data. We retain audit logs for security and compliance purposes.
Google Account and Google Drive Integration
If you connect your Google account or open a file with Instafill.ai from Google Drive, we access a limited set of Google data with your consent through Google OAuth. We request only the access needed to provide that feature.
  • Google Drive files (drive.file scope): We can access only the specific files you open or select with Instafill.ai, such as a PDF you choose through the Google Drive picker or the "Open with Instafill.ai" menu. We do not have access to any other files in your Google Drive. We download the selected file solely to fill it on your behalf.
  • Google account email and basic profile: Your email address and basic profile information, used to identify and display the Google account connected to Instafill.ai.
  • OpenID identifier: A stable Google account identifier used to confirm that a file you open belongs to the same Google account connected to Instafill.ai.
We use Google user data only to provide the features described above. We do not use it for advertising, we do not sell it, and we do not share it with third parties except as needed to operate the Service or as required by law. You can disconnect Google Drive at any time in the app, or revoke access from your Google Account permissions page.
Instafill.ai's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Sharing and Disclosure of Information
We share information only as necessary to deliver our Services or as required by law:
  • Service providers: Microsoft Azure (hosting), Cloudflare (security), MongoDB Atlas (database), OpenAI (AI inference), and Stripe (payments). Each operates under strict data processing agreements.
  • Enterprise clients: With your administrators or other authorized representatives for account management.
  • Legal and safety requirements: When required to comply with legal obligations or protect our rights, users, or systems.
We do not sell or rent personal data to third parties.
Data Residency and Retention
Data is hosted primarily in the United States on Microsoft Azure. Enterprise customers may request hosting in Australia, EU, Canada, or the UK. We implement appropriate safeguards for international data transfers. We retain information only as long as needed to deliver the Services or meet legal requirements. You can delete your uploaded forms or account at any time through your dashboard or by contacting support. If you sent us a sales inquiry and hold no account, write to [email protected] and we will delete it.
Security Measures
Instafill.ai employs multiple layers of security, including encryption in transit and at rest, access controls, and network monitoring. We undergo annual penetration testing and are preparing for SOC 2 Type II certification. Despite these efforts, no system is fully secure. Protect your account by using strong passwords and avoiding shared credentials.
Your Rights and Choices
You can:
  • Access, modify, or delete your account and stored documents;
  • Opt out of marketing emails or newsletters;
  • Request a copy or deletion of your personal data (subject to legal exceptions).
Contact us at [email protected] to exercise these rights. We will respond in accordance with applicable privacy laws, including GDPR and CCPA.
Third-Party Sites and Links
Our site and communications may include links to external sites or integrations we do not control. Their privacy practices may differ. We encourage you to review their policies before sharing data with them.
Children and Our Services
Instafill.ai is intended for use by professionals and organizations. We do not knowingly collect personal data from anyone under 18 years of age. If you believe a minor has provided information to us, please contact [email protected] and we will delete it promptly.
Changes to This Privacy Notice
We may update this Notice periodically to reflect operational, legal, or regulatory changes. The "Effective Date" at the top indicates the most recent version. Significant changes will be announced on our website or via email.
Contacting Us
For questions or complaints about this Privacy Notice or your data, contact us at [email protected].