Privacy policy
This policy applies to the MedScribe Chrome extension and its server.
What data we process
- Voice recording (audio) — sent to our server only at the moment of recognition, processed, and immediately discarded. Audio is stored neither on the server nor in a database.
- Form field metadata — field name, label, type, and the list of select options. Existing field contents are never sent to the server.
- Account data — email address, chosen language, license status, and the number of dictation minutes used.
What we never send or store
- Patient-identifying data from the form is never read or sent to the server.
- No browsing history, screenshots, or form contents are created.
- Data is never sold or used for advertising.
Processors
- Speech recognition and text normalization use a cloud language model service. Only the voice recording and field metadata are sent to it.
- Account and license data is stored in our database in the European Union.
Retention periods
- Audio: not stored (0 seconds after processing).
- Minutes usage records: 24 months for billing purposes.
- Account and license: for the duration of the contract, then 6 months.
Your rights
- You can request access, correction, or deletion of your data by writing to our support email.
- We offer clinics a GDPR data processing agreement (DPA).
Browser permissions
- Microphone — only during dictation, after your click.
- Active tab access — to read form field names and insert text.
- Storage — to keep your chosen language and license token.