Skip to content
FormBlessed

PRIVACY NOTICE · UPDATED OCTOBER 16, 2026

Your documents and data.

This notice covers the FormBlessed Chrome extension and its connected processing service. The service is preparing for public release. These public pages accept no documents or payment-card details. The product page includes the YouTube player described below.

Information handled for your requested work

FormBlessed handles the files and file metadata you select, extracted text and records, source evidence, your instructions, relevant connected-form fields and website URLs, recruiting-chat questions and conversation context, approved answers, workflow outcomes and recovery history.

It also handles account identifiers and connection credentials, shared credit and eligible trial information, billing receipts, and technical status or error information. These support requested imports, document analysis, factual replies, source review, form filling, interrupted-work recovery, charge reconciliation and security.

CopyCat and FormBlessed use the existing shared credit wallet and eligible trial balance and expiration. Payment-card entry for credit purchases is handled through the existing payment provider, rather than an extension card form.

When FormBlessed fills a webpage, the destination website can read those values before you approve final Save. That website’s privacy practices apply. Select only information you are authorized to process and check the destination before starting.

Optional Google Drive import

Google Picker and the drive.file permission support selecting individual files. FormBlessed may read a selected file’s name, type, size, download permissions and content. It does not request a full-Drive read scope.

Imports are snapshots. Google Docs and Slides are exported as PDF; Google Sheets as XLSX. FormBlessed does not edit the original or synchronize subsequent changes. Unsupported, restricted or oversized files may require a smaller manual snapshot. During prelaunch, connection access is limited by the Google app’s access settings; general public availability has not yet been verified.

The backend keeps the OAuth access token in process memory for a short import session with a ten-minute session expiry. The session is removed on completion, cancellation, failure, expiry or process restart. A refresh token is not persisted. Ending the session does not revoke the Google account’s grant.

You can revoke access through Google Account connections. Revocation does not erase snapshots already imported. Selected Google file content can be processed and stored by the service providers described below for your requested document and form work. Google’s API Services User Data Policy also governs permitted uses of Google user data.

Processing, storage and service providers

Browser storage can contain settings, account-connection credentials, source bytes, records, drafts and run history. Local operation also has local backend state. Browser cleanup affects only the scope described by the control you use.

The prepared hosted service uses an OVH worker with memory-backed temporary document storage. Durable source and checkpoint copies and account-scoped saved state can also remain in private Supabase storage and databases. Temporary worker storage does not mean that no cloud copies exist.

Google supplies optional OAuth, Picker, selected-file downloads and exports. Microsoft Azure Document Intelligence processes document content for requested text and layout analysis. OpenAI processes requested AI input and output through the shared CopyCat metered gateway. The worker also uses GitHub Copilot SDK/CLI software with that custom gateway; its configured model endpoint is OpenAI’s API.

Supabase supplies account/data storage and gateway state. OVH hosts the worker. Render hosts public pages and shared billing services. Shared-credit purchases use Stripe. Hosting and software providers may process operational metadata and logs.

HTTPS protects transmission. Account checks and private cloud configuration limit ordinary application access. Administrators and processors can have operational access; this is not an end-to-end-encryption or zero-access promise.

Embedded YouTube demo

The FormBlessed product page embeds the approved demo using YouTube’s privacy-enhanced player. Loading or using that player can send technical information, such as your IP address and player interactions, to Google/YouTube. The video does not autoplay. You can also use the separate Watch on YouTube link.

Google’s privacy policy applies to its handling of player information. Privacy-enhanced mode does not mean that the player makes no network requests.

Provider retention and training controls

Provider handling is also governed by their terms and account settings. See OpenAI’s API data controls and Microsoft’s Document Intelligence privacy information.

The shared Responses gateway requests store:false. This does not establish zero retention, remove abuse-monitoring logs or erase the application’s recovery copies. FormBlessed does not currently request Azure’s optional earlier-delete operation. No instant deletion from provider systems is promised.

Production account-specific training and retention controls have not been verified for public service access. This notice makes no account-specific zero-retention or no-training guarantee.

Retention and deletion

Automatic server document expiry, cloud cleanup and self-service server deletion are not currently enabled. The approved target is seven days for unused sources and thirty days after the last completed or stopped use. That schedule is implemented but not active, so it is not currently a deletion deadline.

Active work and uncertain provider expenses can require reconciliation before supported content deletion, to avoid incorrect or duplicate charging. Actual source reuse renews the applicable target clock; merely checking status does not. No automatic expiry is promised while the schedule remains inactive.

Browser-only cleanup, stopping a run, disconnecting an account, revoking Google access or removing the extension does not prove that server or provider copies were deleted. For a deletion request, email support@lavenberry.com. No unverified completion time or deletion from every copy is promised.

Minimal billing, trial, financial, security and deletion/revocation evidence can remain after content deletion. The configured current backup export uses the financial/account-state policy rather than exporting FormBlessed document content. Historical content-bearing archives remain in restricted quarantine and have not been erased by that policy change. Providers and backups have independent retention rules.

Questions and updates

For FormBlessed support, account, deletion or privacy questions, contact support@lavenberry.com. Avoid sending source documents, passwords, sign-in codes, connection credentials or raw logs in an initial support message.

This notice will be updated when service availability, data handling or retention controls change. Publication of this notice does not activate hosted processing, Google public access or automatic cleanup.

Optional website analytics

With your permission, the public CopyCat and FormBlessed website pages use Google Analytics 4 to understand page visits. It receives a fixed public page address and title, browser/device information, and pseudonymous browser and session identifiers. We remove URL query strings and fragments and replace detailed referrers before requesting page views. We do not send uploaded documents, form values, account IDs, email addresses, billing or connection details, and do not set an account User-ID. The tracker is excluded from sign-in, account, billing, connection and administration pages. Advertising personalization and Google Signals are disabled. Standard Analytics technical session information can accompany page views; form, search and other enhanced interaction measurement are not enabled for this integration.

The Analytics script loads only after you choose Allow analytics. Your choice is stored in this browser for up to 180 days. Analytics cookies for this website are configured for up to 180 days. Use Analytics preferences to decline later; this stops further collection and removes this integration’s cookies without clearing your account session. Google’s processing and retention are also governed by its terms and the website property’s settings. The separate YouTube player is described in the FormBlessed notice.

Google privacy information