PDF Privacy and File Security
If you are uploading contracts, applications, healthcare paperwork, onboarding documents, or other sensitive files, privacy is not a side question. It is part of the decision about whether to use the tool at all.
This guide explains what FillablePDF stores, how long files are retained, what analytics tools are in place, and when you should choose a different workflow because the document is too sensitive for a browser-based utility.
It is a practical companion to the legal Privacy Policy. The policy covers formal terms. This article answers the operational questions people usually ask before uploading.
What happens when I upload a PDF?
When you upload a document, the file needs to be stored temporarily so the system can:
- Analyze the layout
- Detect likely form fields
- Save the draft field structure
- Generate a filled or edited export when you are done
That means uploads are not purely in-memory or instantly discarded. A temporary retention window exists so the product can support processing, retries, and short-term session recovery.
Are uploaded files stored permanently?
No. Uploaded PDFs are retained temporarily and deleted automatically after the configured retention period.
The current policy in the app and repository states that uploaded PDFs and associated data are automatically deleted after 7 days. That is long enough to support short-term recovery, but not intended to act as permanent cloud storage.
If you need permanent storage, internal retention controls, or long-lived document archives, you should download the resulting PDF and store it in your own approved system.
Is data encrypted?
Files are transmitted over HTTPS, which means data is encrypted in transit between your browser and the service.
That protects against common interception risks during upload and download. It does not by itself mean the product is suitable for every regulated or high-risk workflow, but it is the baseline protection users should expect from a modern web application.
What information besides the PDF is stored?
The service may temporarily store:
- The uploaded PDF itself
- Detected field metadata
- Field values you enter while filling the form
- Technical metadata required to process or retrieve the result
The privacy policy also states that IP address, browser details, and usage data may be collected through standard logs and analytics tooling. That means document content is not the only data involved in the session.
Are analytics or session tools used?
Yes. The privacy policy states that Google Analytics and Amplitude are used, and that session replay may be enabled for a portion of users.
That matters because people often assume document tools only process the PDF and nothing else. In reality, browser-based products often collect interaction data to improve the application. If you are handling highly sensitive documents, that is something to evaluate before use.
For the formal language on this point, see the Privacy Policy.
Should I upload medical, legal, or financial documents?
It depends on your risk tolerance and your organization's requirements.
FillablePDF is suitable for many day-to-day administrative workflows, especially when:
- You need to prepare or complete a standard form quickly
- The document is operationally sensitive but not governed by stricter internal controls
- A browser workflow is acceptable under your organization's policy
You should be more cautious when:
- The file contains regulated health information
- The document is subject to strict contractual or legal handling rules
- Your organization requires vendor review, DPA review, or approved storage controls
- The workflow requires certified signing or auditable chain-of-custody guarantees
In those cases, do not assume that a general browser tool is automatically approved. Check with your compliance, legal, or security team first.
Can I delete my file sooner than the retention window?
The privacy policy states that users can delete uploaded documents using the delete function. If you are working with a sensitive file, using explicit deletion rather than waiting for automatic cleanup is the safer practice.
If deletion behavior is critical to your workflow, verify it on a non-sensitive document first so you know exactly what the interface and resulting state look like.
Does FillablePDF require an account?
No. The product is designed for anonymous use.
That lowers friction and can reduce unnecessary personal data collection tied to accounts. At the same time, anonymous use does not mean zero data handling. The file, temporary processing metadata, analytics, and server logs still exist during the session and retention window.
What is the safest way to use FillablePDF for sensitive documents?
If you decide the document is appropriate for this workflow, the safest operating pattern is:
- Upload only the file you need for the current task.
- Complete the review and export in one session when possible.
- Download the finished file promptly.
- Delete the uploaded document if you no longer need server-side access.
- Store the final PDF in your own approved document system.
This reduces the time a document remains in temporary storage and limits avoidable exposure.
When should I avoid uploading a PDF entirely?
Use a stricter workflow if the document requires:
- Certified digital signatures
- Long-term evidentiary preservation
- Contractually restricted storage locations
- Special regulatory handling
- Vendor security review before processing
FillablePDF is built for speed and ease of use. That is valuable, but it is different from a document platform built around compliance-heavy retention, governance, and signature requirements.
FAQ
How long are uploaded files kept?
The current documented retention window is 7 days, after which uploaded PDFs and associated data are automatically deleted.
Is my PDF encrypted?
Yes, uploads and downloads are protected with HTTPS, which encrypts data in transit.
Does the app use analytics?
Yes. The privacy policy states that Google Analytics and Amplitude are used, and that session replay may be enabled for some users.
Can I delete a document manually?
Yes. The privacy policy says users can delete uploaded documents using the delete function instead of waiting for automatic cleanup.
Where should I look for the formal policy language?
Use the legal Privacy Policy for the official terms, and use this FAQ for the practical explanation before you upload.