Formé ("the Extension", "we", "our") is a browser extension that detects form fields on the
websites you visit, fills them from a profile you store locally on your own
device, and — only when you ask — generates open-ended answers in your own writing
voice using an AI service.
We designed Formé to be private by default: your information stays
encrypted on your device and is never sold, never used for advertising, and never uploaded
anywhere except in the one narrow case described under "AI-Fill" below — and only when you
explicitly trigger it.
1. Who is responsible
This Extension is developed and maintained by an independent developer.
Contact:guptahariom049@gmail.com
If you have any question about your data or this policy, email the address above.
2. What data Formé stores (on your device only)
When you use Formé you may choose to save information into a profile. This
can include, depending on what you enter:
Identity details — name, email address, phone number, date of birth.
Professional details — current/expected compensation, notice period, work info.
Links — LinkedIn, GitHub, portfolio, and other URLs.
Open-ended answers you write or save (e.g. "Why do you want this role?").
Your app settings and per-website profile preferences.
How it is stored:
All of the above is stored locally in your browser using the browser's
extension storage. It is never written to any server owned by us.
Sensitive profile data is encrypted on your device using
AES-GCM, with an encryption key derived from your passphrase via
PBKDF2 (SHA-256, 210,000 iterations) and a random salt.
Your passphrase is never stored and never transmitted. It exists only in
your browser's in-memory session while the vault is unlocked, and is cleared when you lock
Formé or close the browser. Without your passphrase, the stored data cannot be decrypted by
anyone — including us.
We also store one anonymous random identifier (a randomly generated UUID)
that is not linked to your name, email, or any personal detail. It is used only to apply
fair-use rate limits to the AI-Fill service (see Section 3).
3. AI-Fill — the only time data leaves your device
Formé includes an optional feature that writes answers to open-ended questions in your own
voice. This is the only feature that sends any information off your device,
and it runs only when you explicitly click the AI-Fill (✨) button on a
field. It never runs automatically or in the background.
When you trigger AI-Fill, the following is sent to our generation service:
The question / field label you asked it to answer.
Minimal page context — the page title and a short hint about the field type.
A small, relevant snippet of your profile — only the stored facts relevant
to that specific question (not your whole profile).
Up to 2–3 of your past answers, used to match your writing style.
Your chosen tone (e.g. formal, casual).
Where it goes:
The request is sent over HTTPS to our serverless proxy hosted on Cloudflare
Workers (forme-ai.guptahariom049.workers.dev).
The proxy forwards the request to a third-party Large Language Model provider
(OpenRouter) to generate the answer, and streams the result back to you.
What the service does and does not do:
The proxy is stateless: it does not log, store, or retain
your questions, your profile snippet, your answers, or the generated text.
The anonymous identifier from Section 2 is used only to enforce rate limits.
Answers are generated in real time and returned to your browser; nothing is kept.
Because generation is performed by OpenRouter, that request is also subject to
OpenRouter's privacy policy. We send them only the minimal content described above and no identifying account
information.
If you never click the AI-Fill button, no data ever leaves your device.
4. What Formé does NOT collect
To be explicit, Formé does not:
Collect or store your passphrase.
Track your browsing history, the pages you visit, or your activity across sites.
Collect location, health, or financial account data.
Use cookies or third-party analytics/advertising trackers.
Sell, rent, or share your personal data with any third party for advertising or any purpose
unrelated to the Extension's single purpose.
Use your data for creditworthiness or lending decisions.
5. Permissions and why we need them
Formé requests the minimum permissions required to work:
Permission
Why it is needed
storage
To save your encrypted profile and settings locally on your device.
Host access (<all_urls>)
To detect and fill form fields on the websites where you choose to use it, and to show
the fill/AI-Fill controls in the page. Formé reads field labels to understand what a
field means; it does not read or transmit page content beyond what is needed for the
feature you invoke.
Formé does not request tabs, browsing history, or scripting permissions beyond what host
access already covers.
6. Your control over your data
You are always in full control:
View & edit: Open the dashboard to see, edit, or remove any saved field.
Export: Export your entire profile as a JSON file at any time.
Delete everything: Use the "Wipe all data" option to instantly and
permanently erase all stored data from your device.
Uninstall: Removing the Extension deletes all of its locally stored data.
Because data is stored locally, deleting it on your device deletes it entirely — there is no
server-side copy for us to retain.
7. Data security
Profile data is encrypted at rest with AES-GCM using a key derived from
your passphrase (PBKDF2-SHA256, 210,000 iterations, random salt, random IV per
encryption).
The passphrase and the derived key are held only in volatile session memory while unlocked
and are never persisted to disk or transmitted.
All network communication with the AI-Fill service uses HTTPS.
No system is perfectly secure, but we have designed Formé so that the most sensitive data
never leaves your device and cannot be read without your passphrase.
8. Children's privacy
Formé is not directed at children under the age of 13 (or the equivalent minimum age in your
jurisdiction), and we do not knowingly collect data from children.
9. Changes to this policy
If we make material changes to this policy, we will update the "Last updated" date above and,
where appropriate, note the change in the Extension's listing. Continued use of the Extension
after an update constitutes acceptance of the revised policy.