Your files. Your choices.
Fileloom's conversion, editing, transcription, capture and recording engines process files on your device. They do not upload source files. The separate optional AI workspace sends selected text to your Fileloom service and the provider you choose, with consent as described below. Downloads and previews remain available in the current tab until you clear them or close it.
This website
This website does not use advertising or analytics cookies and does not track you across sites. Our host may keep standard server logs (IP address, page and time) for security and reliability. Checkout pages are provided by Lemon Squeezy, which acts as the seller of record and handles your payment details. We never see your card number.
Purchases and licence keys
When you buy a plan, Lemon Squeezy emails you a licence key. The extension sends that key and an installation name to Lemon Squeezy’s licence service to activate it, and checks it again automatically from time to time so renewals, cancellations and refunds apply on their own. These requests contain no files, pages or prompts. If you are offline, your plan keeps working for up to 7 days. Your licence key is stored in your browser’s extension storage; deactivating it in Settings releases it.
Browser storage and free allowance
Your browser stores your free-file count for the day, licence activation details and tutorial preferences. The free allowance of 5 files renews each day at local midnight. Clearing extension data or reinstalling can remove browser-only records. This build includes no analytics, advertising or remote activity tracking. Cached speech and optional on-device writing models can be removed by browser storage eviction.
Speech and on-device writing models
The first transcription downloads an English speech model from Hugging Face. Studio's optional English SmolLM2 writing model downloads only after consent. Hugging Face receives normal connection metadata, such as your IP address and model requested. Your recording, documents and prompts are not part of those model downloads. The executable runtime is bundled with Fileloom. Extractive source reviews need no model download.
Optional AI workspace
AI features are switched off in this version. If they return, the following applies. When configured by the owner, the AI workspace connects to the displayed Fileloom service. Getting a quote sends your brief, instructions and extracted source text to that service after you consent. Confirming the maximum credit charge then authorizes a request to the selected provider: OpenAI, Anthropic or Google. No cloud request is made by the ordinary file tools, and no cloud AI provider receives the source during price lookup. The workspace never needs your personal provider API key.
The service stores a hashed account identity, short-lived session hashes, credit/financial records, temporary quotes and bounded job results for retry recovery. Quotes expire after five minutes and source-bearing payloads are cleared after consumption; expired items are removed by a periodic sweep. Job results are kept for up to 24 hours plus the cleanup interval. Financial records and idempotency tombstones persist. AI providers handle submitted text under their API terms. Do not submit confidential material without authority. Check generated facts and decisions against the source.
Email drafts
Gmail and Outlook compose buttons send the chosen recipient, subject and draft body in the compose URL when opened. Downloaded EML drafts can include a selected attachment. Fileloom does not read your mailbox, connect accounts through OAuth or send emails automatically. Review before opening a provider and before sending.
Autofill, scraping, downloads and review check
Autofill uses a profile you type in the popup (name, email, phone, address). It is stored only in this browser, is not encrypted, and is filled only into visible fields on the page you choose. It never fills passwords or payment fields and never submits a form. Web scrape reads emails, phone numbers, business details, reviews and tables from the open page and a few same-site contact pages, using your current login, and builds files on your device. The review check scores reviews already loaded on the page, locally. The page downloads list gathers image, video and file links from the page and sends the ones you select to Chrome’s download manager. None of this is sent to Fileloom or any third party.
Screen recording and webpage tools
Recording starts after you choose a tab, window or screen in Chrome. Microphone capture is optional and off by default. Recordings stay in memory until saved; closing the recorder discards unsaved recordings. Pausing keeps sharing active. Stop sharing through Fileloom or Chrome.
Webpage tools use Chrome permissions only for a selected page after your action. Screenshots, element fonts/colours, HTML/CSS snapshots and page archives stay on your device. Full-page capture temporarily scrolls and adjusts fixed/sticky elements, then restores them. Protected pages and cross-origin resources may be inaccessible.
SEO inspection reads metadata and word frequencies. Word/Excel exports copy selected visible content and tables, excluding form values and editable fields. The extension has no real Google ranking, search-volume or social-account feed. Fetching an external script is a separate action to its original website under browser access rules; same-origin requests can use your website session. Source is displayed as text and is not executed by Fileloom. Archives can contain private page content; review before sharing.
Payments and licence checks
Lemon Squeezy handles hosted checkout and payout setup once the owner configures an approved store and exact live products. File-tool licence activation and validation send the purchased licence key and activation instance ID to its fixed public License API. No file or prompt is included. The purchased key and instance ID are stored in Chrome storage. Pro validation requires internet; successful checks are cached in memory for up to five minutes.
The optional AI service verifies the purchased licence/instance and keeps a separate prepaid credit ledger. Signed, verified paid-order events grant credits; refunds can remove them. Provider keys and merchant webhook secrets remain on the server and are never included in the Chrome package. A checkout return or browser clock change cannot mint AI credits. Live payments and AI remain unavailable until owner configuration is complete.
Updated 17 October 2026. Questions or support: pencilhousegroup@gmail.com.