Legal
Privacy Policy
Last updated: June 19, 2026
This Privacy Policy explains how FillUply, operated by SomexAI Applications Group, LLC ("we", "us"), handles information. For form responses you collect, you are the data controller and we act as a processor on your behalf.
Information we collect
- Account data — your email and authentication details when you sign up.
- Form & workspace data — the forms, fields, and settings you create, and your team/workspace membership.
- Form responses — answers, uploaded files, and signatures submitted by your respondents.
- Billing data — handled by Stripe; we store a customer/ subscription reference, not full card numbers.
- Cookies — to keep you signed in and remember preferences (see below).
How we use information
To provide and operate the Service, authenticate you, process payments, send transactional and notification emails, prevent abuse, and improve the product. We do not sell your personal information.
Service providers (subprocessors)
We share data with vendors only as needed to run the Service:
- Supabase — database, authentication, and file storage
- Vercel — application hosting
- Stripe — payment processing
- Amazon SES — transactional email delivery
- Mapbox — address autocomplete suggestions
- Anthropic (Claude) — AI form generation from your prompts
Cookies
We use essential cookies for sign-in and preferences (such as your dashboard view and active workspace) and to record your cookie choice. We don't use advertising cookies. You can accept or reject via the banner; blocking essential cookies may break sign-in.
Uploaded files & signatures
Files uploaded to your forms are stored privately and made available only to your workspace via expiring links. Signatures are stored as images within the response. You control retention by deleting responses or forms.
Data retention
We keep data while your account is active. Deleting a response, form, or workspace removes the associated data (including uploaded files) within a reasonable period, subject to backups and legal obligations.
Security
We use industry-standard measures including encryption in transit and access controls. No system is perfectly secure, so we cannot guarantee absolute security.
Your rights
Depending on your location, you may have rights to access, correct, export, or delete your personal data. For data you submitted as a respondent, contact the form owner; for account data, contact us.
International transfers & children
Data may be processed in countries other than yours. The Service is not directed to children under 13 (or the age required by local law).
Changes & contact
We may update this policy; material changes update the date above. Questions or requests: info@somexai.com, or SomexAI Applications Group, LLC, 121 Salamander Dr, Garner, NC 27529.