Add to ChromePrivacy policy
Last updated 27 October 2026
The short version
Your data. Pencil keeps what you tell it in your Pencil account, so it can fill forms for you. We do not sell your data, show you ads, or use your data to train AI models.
The AI model. When Pencil fills a form, only the field labels of the form you are filling, and the facts they need, go to the AI model. Never your whole profile. When Pencil fills a form or answers a question, sensitive details never go to the AI model. A resume or bio you import is the one exception: the AI model reads all of it, once, to find your facts.
AI tools. An AI tool such as Claude or ChatGPT reads your memory only if you connect it, only for the personas you choose, and never a sensitive detail.
What Pencil keeps
Your account. Your email address, how you sign in, and with Google, your name and profile photo. For each sign-in, the time, your browser and your IP address, to keep your account safe. A sign-in code is stored only as a hash, and stops working after 10 minutes.
What you save. Facts, such as your name, contact details, jobs, schools and eligibility to work; stories, the longer answers you write, such as “About me”; your voice, the personas, words and settings that shape how Pencil writes for you; and documents you upload, such as a resume. Search data made from the names of your facts and from your stories lets Ask Pencil find what a question means.
Your settings. The moments you chose, how dates and phone numbers read, whether Pencil may offer to remember what you type, and your privacy choices and when you made them.
Your fill history. Which forms you filled and when, which values went where, how you rated each field, and for 30 days the text a fill replaced. With it, your choices on each site (the fields you told Pencil to skip there, and the fields it should never offer to remember there), the sites you used Pencil on, and the Chromes you connected.
Requests and drafts. The list of requests that left your account in the last 30 days, with counts, never what was sent. Long answers you were typing on a site you allow, for 24 hours, so a page reload does not lose them.
Your plan. On Free, the forms Pencil reviewed or filled for you this month, each kept as a coded key and never its address, to count them against the monthly limit. If you go Pro, your plan, when it renews or ends, and the ids Dodo Payments gives your customer record and subscription. Never your card or UPI details.
AI tools you connect. Each tool’s name, the personas it may read, whether it is paused, and for 30 days what it read, by name, never a value. Facts an AI tool suggested, until you accept them or say not now, then for 30 days.
After you remove the extension. If you answer the question on the page that opens, only your answer and the date, with nothing that says who you are.
Everything else you give. Everything you choose to give Pencil is kept the same way, including sensitive details you save yourself. Ask Pencil conversations are not kept. They stay in your browser tab, and go when you close it or clear the chat.
Where it is kept
In your Pencil account, in the cloud, so it works in any Chrome you sign in to. What you save, such as your facts, stories, jobs and fill history, is encrypted in our database, documents sit in a private storage bucket, and everything travels encrypted.
On your device, the extension keeps only its sign-in and, until you close the browser, the sites where you hid the page pill. What the dashboard keeps in your browser is under Cookies.
What Pencil reads on a page
Field labels. On a site you allow, Pencil reads the labels of a form’s fields, never what is in them, to show what it can fill. Those labels reach our server. When you start a fill (a field icon, the page pill, the toolbar button or a shortcut), Pencil reads that form’s fields, and the page’s address and title reach our server. They do not otherwise.
What you type. On a site you allow, Pencil also notices what you type into a field so it can offer to remember it. A small note asks first. Nothing is kept without your yes, and the site’s name is kept only with your answer. Long answers you type there are saved to your account as you go, and deleted after 24 hours.
Passwords. Pencil never reads passwords or one-time codes.
What goes to the AI model
What is sent. Most fields are matched to your facts by plain rules, with no AI model. For the rest of a form, Pencil sends the field labels and only the facts those fields need. Drafting a long answer, or previewing a persona, sends the stories, voice settings and the few facts that answer needs, such as your city. Ask Pencil sends your question, and the facts and fills that answer it. An import sends the whole resume, LinkedIn PDF or bio you import, once, so the model can find your facts, and you check each one before it is kept.
What never is. Apart from an import, sensitive details never go to the model. They include government and tax IDs, passport, bank and card details, date of birth and age, gender, marital status and other equal-opportunity answers, disability, health, religion, caste, salary and criminal record. Pencil fills them only from what you saved, by exact matching rules, and answers questions about them by looking them up.
Which model. Requests reach Anthropic’s Claude models through OpenRouter, set to use only providers that do not keep or train on what they receive.
Your request list. Settings links to a list of every request that left your account in the last 30 days, your sign-ins and sign-outs included, under Requests that left your account: what was sent, why, to whom and when. It keeps counts, such as “4 field labels and 6 facts”, never what was sent.
Usage counts. Usage counts for PostHog are not listed there: they carry nothing about you beyond a coded id, and none are sent until you turn on Share usage. What the AI tools you connect read is listed on the AI tools page instead.
AI tools you connect
Before it reads. You can let an AI tool, such as Claude, ChatGPT or Cursor, use your Pencil memory. It reads nothing until you sign in to Pencil from the tool and press Allow.
What it can read. Your facts and stories, your voice, and your fill history (each form’s title, site, date and number of fields filled, never the values), only for the personas you choose.
What it never gets. A sensitive detail, since a search that names one tells the tool only that you saved one, never what it is; a story you mark “Never reuse”; your documents; and anything before you press Allow. It can never fill or submit a form, or change your memory without your OK.
Suggestions. If you let it suggest facts, each suggestion waits in Memory until you accept it or say not now, and nothing it suggests is saved before you do. It can never suggest a sensitive detail.
A separate service. A tool is a separate service, run by its own company under its own terms and privacy policy. What it reads from Pencil goes to that company.
Activity and control. The AI tools page in the dashboard lists every request each tool makes for 30 days, by name and never a value, such as “Claude read 3 facts: Notice period, Current title, Company.” Pause a tool on that page and it gets nothing until you resume it. Remove it and it loses access at once; to connect it again, add Pencil in the tool and press Allow again.
Who processes data for us
OpenRouter and Anthropic. Run the AI model requests above.
Voyage AI. Turns your saved stories, the names of your facts, your Ask Pencil questions and the words an AI tool you connect searches with into search data, so Pencil can find what a question means. It never gets a fact’s value or a sensitive fact, a story you mark “Never reuse”, or an Ask Pencil question about a sensitive detail.
PostHog (EU region). Counts which of Pencil’s features are used, such as “a field was filled” or “Memory was opened”, under a coded id that only Pencil can tie to your account. It never gets your email, your memory, a page’s address, a field’s label or anything you type, and its location lookup is off. It counts nothing until you turn usage analytics on, in the privacy choices the dashboard asks for or in Settings, under Your data, and stops the moment you turn it off.
Better Auth. Gets an event each time an account is created, signs in or signs out, and each failed attempt to sign in, with the email, name, IP address and browser, so we can see sign-ups and spot abuse. It never gets your memory or a sign-in code. Failed attempts are not listed in Settings, since they may not be yours.
Resend and Google. Resend sends your sign-in code emails. Google takes part only if you choose to sign in with Google.
Dodo Payments. As the merchant of record for Pro, it takes the payment. It gets your email when you start a checkout, and collects your name, billing country and payment details on its own checkout page. Payment details stay with Dodo; Pencil never sees them.
Mux. Hosts and plays the two short videos on the AI tools and Ask Pencil pages. Your browser reaches it only when you press play. Mux's own player then loads in a frame on the page, and Mux gets your IP address, your browser, the page the video was played from, and how the video played, such as when it stops and how well it loads. Mux may keep its own cookies or storage in that frame. Pencil sends it nothing else about you.
Cloudflare and our hosts. Cloudflare stores your documents, and our database and hosting providers run the servers Pencil lives on.
Each of them processes data only to provide its service to Pencil. Some are in the United States, so your data may be processed there, under the protections the law requires for such transfers.
Why we use your data
To give you the service you signed up for: remembering your details and filling forms when you ask. Your sign-in records are kept to protect your account. Usage counts show us which features help, so we can improve Pencil, and notes in your browser save you a step.
Where the law asks for a legal basis, it is the contract between us, our legitimate interest in keeping Pencil secure, and, for usage counts and notes kept in your browser, your consent, which you can withdraw at any time in Settings.
How long we keep it
Your account. Your account and what it holds stay until you delete everything or close the account, both in Settings. Removing the extension does not close your account: your memory stays until you close it.
Deleted items. A fact you delete or change is hidden, but kept in its history until you delete everything or close your account, so a change can be undone. A deleted document is kept about an hour, so it can be brought back, then removed. A deleted story is removed after about an hour, the next time your stories are opened.
Text a fill replaced. 30 days.
Unsent long answers. 24 hours.
Request and tool lists. The list of requests that left your account, and the list of what AI tools read: 30 days.
A suggestion from an AI tool. Until you decide, then 30 days.
An AI tool you connect. Until you remove it or close your account.
An answer after you remove the extension. It stays in our server logs, which are cleared within 30 days.
Your rights
You can see, correct or delete any fact, story or document in the dashboard. Download a copy of everything Pencil keeps, as JSON or Markdown, from Settings, under Your data.
Delete everything Pencil keeps, or close your account and erase all its data, including old values and stored files, from Settings, under Your data. Stored files are removed within the hour. You can also ask for either by writing to hello@usepencil.xyz. It is free, and we answer within 30 days.
You can object to how we use your data, or ask us to stop, by writing to the same address. Turn off the offer to remember what you type, Share usage, or Remember in this browser, in Settings, and choose site by site where Pencil may appear.
You can complain to a regulator: in the UK the Information Commissioner’s Office, in the EU your country’s data protection authority, in India the Data Protection Board.
Your account email cannot be changed or moved to another email.
Security
We encrypt your data in transit and your facts at rest, and limit who can reach our systems. If a breach affects your data, we tell you, and the regulator where the law requires, without delay.
Who Pencil is for
Pencil is for people 16 or older. If we learn that an account belongs to someone younger, we close it and erase its data.
Changes to this policy
When this policy changes, the date at the top changes too. Before a change to what we do with your data takes effect, we tell you in the dashboard or by email.
Contact
Write to hello@usepencil.xyz with any question about your data, or about this policy. We answer within 30 days.