AI Policy

Last updated: June 20, 2026

At ToWebForm, we believe in transparency about how we use artificial intelligence. This policy explains what AI technology we use, what data it processes, how your data is handled, and what safeguards are in place.

1. How We Use AI

ToWebForm uses AI for a single, clearly defined purpose: detecting form fields in uploaded PDF documents. When you upload a PDF, our system converts each page into an image and sends those images to an AI model that identifies and maps the document's structure, including headings, static text, and fillable input fields (text boxes, checkboxes, date fields, signature lines, and more).

The AI returns a structured description of the form layout, which ToWebForm uses to generate an interactive, accessible web form overlay. This is the only way AI is used in our platform. We do not use AI for analytics, profiling, advertising, content generation, automated decision-making, or any purpose beyond field detection.

2. AI Provider

We use Google Gemini models through Google's official paid GenAI API. Google's API terms of service state that data submitted through the paid API is not used to train or improve Google's AI models. You can review Google's data usage policies at ai.google.dev/gemini-api/terms.

3. What Data Is Sent to the AI

When field detection is triggered (either through the dashboard or the public demo), the following data is sent to Google Gemini:

  • PDF page data: The pages of your uploaded PDF are processed into a visual format and sent to the API for analysis.
  • A system prompt: A fixed set of instructions telling the AI how to identify and categorize form elements.

We do not send any of the following to the AI:

  • Your name, email, or account information
  • Form submission data (responses filled in by end users)
  • Payment or billing information
  • Any data unrelated to the PDF being processed

4. When AI Processing Occurs

AI processing happens once per PDF, at the moment you upload a document and initiate field detection. After the AI returns the detected form structure, the results are saved and the AI is never called again for that document. Viewing, editing, publishing, and collecting submissions on a form do not involve any AI calls.

5. Data Storage and Retention

Your uploaded PDF files are stored securely in our cloud infrastructure (Supabase Storage, hosted on AWS) so that ToWebForm can render the original document with interactive form fields overlaid on top. These files are retained for as long as your form exists in the platform.

The AI's structured output (the list of detected fields, their types, labels, and positions) is saved as part of your form configuration. The temporary files generated during the AI processing window are not separately retained by ToWebForm after the API call completes.

Per Google's API data usage policy, data sent to the Gemini API through the paid tier is not stored by Google beyond the duration needed to process the request and is not used for model training.

6. Demo Mode

ToWebForm offers a public demo that allows users to upload a PDF and preview the AI-powered field detection without creating an account. Demo uploads follow the same AI processing pipeline described above. Demo data (including the uploaded PDF and detected fields) is temporary and is automatically cleaned up.

7. AI Output Accuracy

AI-generated field detection is probabilistic and may not be 100% accurate. The AI may occasionally misidentify field types, miss fields, or misalign bounding boxes. ToWebForm provides a visual editor that allows you to review, correct, and refine all AI-detected fields before publishing your form.

ToWebForm is a productivity tool, not a replacement for human review. You are responsible for verifying that all detected fields are correct before making a form publicly available.

8. No Training on Your Data

To be explicit:

  • ToWebForm does not train any AI models. We are consumers of a third-party AI API, not AI model developers.
  • Google does not use paid API data for training. Per Google's Gemini API terms, data submitted through the paid API is not used to train or improve their generative AI models.
  • Your documents are not used to improve our product's AI capabilities. We do not collect, aggregate, or analyze your uploaded content for any purpose beyond providing you the field detection service.

9. Security Measures

All communication with the Google Gemini API occurs over encrypted HTTPS connections. API keys are stored as server-side environment variables and are never exposed to the browser or client-side code. PDF processing occurs entirely on our secure server infrastructure.

10. Changes to This Policy

We may update this AI Policy from time to time to reflect changes in our technology, practices, or legal requirements. We will update the "Last updated" date at the top of this page when changes are made. We encourage you to review this policy periodically.

11. Contact Us

If you have questions about how we use AI or how your data is handled, please contact us at:

Foresight Technologies LLC
Email: Legal@ToWebForm.com

← Back to home