Legal · Public

Privacy Policy

What we collect, why we collect it, who ever sees it, and how to take it back or delete it. Written to be read, not to be skipped.

Effective from
30 September 2026
Last reviewed
30 September 2026
Applies to
formfill.in & our apps
Governing law
India · IT Act 2000 & DPDP Act 2023
Grievance Officer
support@formfill.in

The 60-second version

Everything below is the detail behind these four lines.

1

We collect

Only what a service actually needs � your contact details, the documents you upload for a specific form, and basic device logs.

2

Why we collect

To file and track applications, verify your identity, take payment, and keep the platform secure.

3

Who sees it

The government portal your application goes to, our payment gateway, and our own staff on your case. Nobody else.

4

Your control

Read it, correct it, export it, or delete it at any time � one email, answered within 30 days.

Contents

1 Who we are and what this covers

FORM FILL is a private online services company. We help people prepare and submit Indian government forms — certificates, registrations, job applications, scholarships and scheme applications — on their behalf for a fee.

This policy explains what happens to your personal information when you browse formfill.in, create an account, upload documents, ask us to file a form, or contact our support team. It covers our website, our user dashboard and any official mobile app we publish.

It does not cover government portals we submit to. Once your application reaches a department, that department has its own privacy rules, and you are subject to those as well. We have no control over how a government body handles your data once it receives it.

We are not a government body. Nothing on this site is legal, tax or financial advice, and we cannot guarantee that any department will approve an application.

2 What we collect

We collect in four categories. Everything in the last two categories is optional.

Account information

Given by you when you sign up or update your profile

  • Full name
  • Email address
  • Mobile number
  • Optional profile details

Service information

Given by you for a specific application we file on your behalf

  • Government ID numbers such as Aadhaar or PAN, only where the form requires them
  • Qualification, job or institution details relevant to that form
  • The name and address printed on the form, which you choose

Uploaded documents

Files you attach so we can complete a form

  • Identity, address, income, caste or domicile certificates as applicable
  • Photographs and signatures
  • Anything else the specific form asks for

Device & usage data

Collected automatically when you browse

  • IP address and approximate location derived from it
  • Browser type, operating system, screen size
  • Pages visited, referring site and pages viewed

We do not ask for your Aadhaar to register. Registration works on an email address and a mobile number. Identity documents are requested only when a specific application needs them, and only for that application.

3 How we use your information

Every use below exists to deliver the service you asked for, keep the platform safe, or meet a legal duty. We do not use your data for anything else.

What we use it for Why it is necessary
Creating and managing your account So you can sign in, see your applications and download receipts.
Preparing and submitting a form This is the service you are paying for.
Identity and eligibility verification Departments reject mismatched applications; we catch it before submission.
Taking payment and issuing refunds Handling your wallet balance and any rejection refund.
Communicating with you Application updates, document requests and support replies.
Fraud, abuse and security Preventing misuse of accounts and protecting uploaded documents.
Legal and tax record keeping Keeping transaction records for the period Indian law requires.
Improving the service Understanding which guides and features are actually useful.
We do not sell your personal information. We do not rent it, trade it, or share it with advertisers. Advertising is served by a third-party network that does its own targeting; your uploaded documents are never visible to them.

4 Cookies and local storage

Cookies are small files stored by your browser. Some are required for the site to work at all; others help us understand usage. This is what we set:

Name Type Purpose Kept for
Laravel session cookie Essential Keeps you signed in and protects forms against cross-site request forgery. Until you log out
Remember-me token Essential Keeps you signed in across browser sessions. 30 days
XSRF-TOKEN Essential Stops other sites submitting forms in your name. Session only
ff_cookie_consent Preference Remembers your cookie choice so we do not ask again. 1 year
Google AdSense cookies Advertising Delivers, measures and limits advertising. See section 5. Up to 90 days
Analytics events Analytics Counts page views and measures which guides are useful. Up to 14 months

You can block or delete cookies in your browser settings. Blocking essential cookies will stop you being able to sign in or submit a form. To limit advertising cookies specifically, see section 5.

5 Advertising and third-party partners

We display advertising on the free parts of the site so that reading our guides stays free. Advertising is served by Google AdSense, which uses cookies and similar technologies to serve and measure ads.

Google may use your activity on this site and other sites to personalise ads. You can opt out of personalised advertising at any time:

Partner Role What they receive
Google AdSense Advertising Page URL, IP address, and ad interaction events. Never your documents or form data.
Payment gateway Payments and refunds Your name, email and payment amount. Your card or UPI credentials stay with them.
Government portals Submitting your application Exactly the fields and documents that form requires.
Hosting & email providers Running the site Technical server logs needed to deliver the service.
Cloud storage Storing your documents Encrypted files, accessible only to staff working your case.

Each partner operates under its own privacy policy. We have asked all of them to process data only on our instructions and for the purpose listed above.

6 When we share your data

We share personal information in only these four situations:

  1. 1 The government portal your application is for — Submitting a form inevitably requires passing your details and documents to that department. This happens only when you ask us to file something.
  2. 2 Our service providers — Payment gateways, hosting and email vendors, each bound by contract and limited to the specific job we hired them for.
  3. 3 Where the law requires it — A valid court order, a statutory demand, or a lawful regulatory request. We will tell you unless the law forbids it.
  4. 4 A business change — If FORM FILL is sold or merged, you will be told before your data moves to the new owner.

We do not sell, rent or trade personal information, and we never share your uploaded documents with advertisers or analytics providers.

7 Data stored outside India

We are based in India and your data is stored primarily on servers located in India. Some of our technology providers may process limited technical information from other countries in order to deliver the service, for example an email delivery provider or a content delivery network serving page assets.

Where that happens, those providers are contractually required to protect your information to the same standard described in this policy. If we ever need to transfer data outside India in any other way, we will do so lawfully and tell you.

8 How long we keep your data

We keep information only as long as it is useful or legally required.

Information Retention period
Account and profile data While your account is active, then deleted within 30 days of your request or closure.
Uploaded documents Until the application reaches a final state, then removed within 90 days.
Application and transaction records 5 years from the last activity, to meet Indian accounting and tax requirements.
Support messages 24 months, so we can see the history if you contact us again.
Server and security logs 90 days.
Analytics data Up to 14 months, in aggregated form.

9 How we protect your data

Encrypted in transit All traffic between your browser and our servers uses HTTPS/TLS.
Encrypted at rest Sensitive records, including uploaded documents, are stored encrypted.
Access control Staff see your documents only when they are working on your specific case.
Audited activity Every access to a customer record is logged and reviewable.
Backups Encrypted backups on a schedule, tested for restore.
Minimisation We ask only for the documents each specific form actually requires.

No method of storage or transmission is completely secure. Please use a strong, unique password, do not share your login details, and tell us immediately if you suspect unauthorised access.

10 Your rights and how to use them

You control your data. You can exercise any of these at any time, free of charge.

Right How to exercise it We respond in
See what we hold about you Email support@formfill.in from your registered address, or raise it from your dashboard. 30 days
Correct inaccurate data Edit it in your dashboard, or email us if the change affects a filed application. 7 days
Delete your account Email support@formfill.in with the subject "Delete my account". 30 days
Get a copy of your data Email us and ask for an export of your applications and messages. 30 days
Withdraw marketing messages Use the unsubscribe link in any email, or ask us directly. Immediately
Limit advertising cookies Follow the opt-out links in section 5. Immediately
Nominate someone to act for you Email us with the written authorisation. 30 days

We may ask you to verify your identity before acting on a request, so that nobody can read or delete your data by pretending to be you. We never refuse a request because it is inconvenient — if a part of a request cannot be actioned, we will say so and explain why.

11 Grievance Officer and redressal

Under the Information Technology Act, 2000 and the rules made under it, a body operating an online service must appoint a Grievance Officer and acknowledge complaints within 24 hours.

Grievance Officer

Grievance Officer, FORM FILL

Response time

Acknowledged within 24 hours

If you are not satisfied with our response, you may escalate to:

  • Write to us again with the reference number from our first reply, and we will escalate to our senior team.
  • For unresolved data-protection disputes in India, you may approach the Data Protection Board of India.

12 Children’s privacy

FORM FILL is not directed at children under 18, and we do not knowingly collect personal information from them. Some services involve applications that a parent files on a child’s behalf; in those cases the parent or guardian is the account holder and is responsible for the information provided.

If you believe a child has supplied us with personal information without a parent’s involvement, contact us and we will delete it promptly.

13 Changes to this policy

We update this policy when our practices change or the law does. The “Last reviewed” date at the top of this page always reflects the current version.

For a significant change — anything that alters what we collect, who we share it with, or how long we keep it — we will notify you by email and post a notice on this page before the change takes effect. Continuing to use the service after that means the updated policy applies.

14 Contact us

Any privacy question, correction request or complaint goes to the same place:

Support hours

Mon - Sat, 9AM - 8PM IST

Prefer a form? Use the contact page and choose Feedback or General Inquiry. Please do not email identity documents — the upload area on your dashboard is the secure route.

Questions about your data?

Ask us anything about what we hold, why we hold it, or how to get rid of it. A real person answers.