Privacy Policy

PAIR Speech is a Chrome browser extension built by RADPAIR, Inc. (“RADPAIR”, “we”). It converts your spoken voice into text and inserts that text into the editable element on the active tab.

This policy explains what data PAIR Speech collects, how we use it, how long we keep it, and the choices you have. It is the privacy policy referenced by the PAIR Speech Chrome Web Store listing.

1.Data we collect

When you use PAIR Speech, we collect:

• Audio: a stream of microphone audio captured while the record button is active. Audio is captured only while you are recording — pressing Stop ends audio capture.
• Transcripts: the textual transcription of your audio, returned by our speech-to-text models.
• Session metadata: timing of each dictation session (start / end), microphone device name (so the extension can show “PAIR Speech is using <your mic>”), and basic browser info (Chrome version) for diagnostics.
• Account data: your email address, name, and subscription state (trial / paid / cancelled) — same as your RADPAIR account, since PAIR Speech requires a RADPAIR account to use. If you access PAIR Speech through an employer or healthcare organization, we may also collect organizational identifiers tied to your account.

We do not collect:

• Page content from the web pages you visit. PAIR Speech does not read the body, headers, cookies, or DOM of pages other than as strictly necessary to identify and interact with the active text field, and even there we only write text into it — we do not read pre-existing content out of it.
• Browsing history. PAIR Speech does not log which sites you visit.
• Keystrokes. PAIR Speech is a one-way text-injection tool; it does not act as a keylogger.
• Data from other tabs. The extension operates only on the tab where you have clicked the toolbar icon (Chrome’s activeTab permission).

2.How we use the data

• Audio and transcripts are processed by our speech-to-text models (running on infrastructure under HIPAA Business Associate Agreements with our cloud and machine-learning providers) to produce the transcript that gets inserted into your active text field.
• Audio and transcripts are also retained to improve the accuracy of our speech-to-text models over time. This is a critical part of how PAIR Speech stays competitive on medical-vocabulary accuracy without requiring you to maintain a custom dictionary. To ensure compliance with healthcare regulations, text transcripts utilized for model improvement are strictly de-identified in accordance with the HIPAA Privacy Rule prior to training. Any use of audio recordings for acoustic model improvement is governed strictly by the applicable Business Associate Agreement (BAA) or Data Processing Agreement (DPA) executed with your organization, or, for independent practitioners, the data utilization grants established in our Terms of Service.
• Session metadata is used for product analytics, billing reconciliation (per-minute or per-seat usage), and customer support troubleshooting.
• Account data is used to authenticate you, gate access to the extension behind a valid subscription, and bill the correct payer.

We do not:

• Sell your audio, transcripts, or account data to third parties.
• Use audio or transcripts for any purpose other than (a) producing your transcript, (b) improving our speech models, or (c) responding to a lawful legal process. Specifically, we do not use your data for advertising, profiling, or training general-purpose generative AI products.

3.Sharing

PAIR Speech data is processed by:

• Your Organization or Practice (if applicable) — If you use PAIR Speech through a clinic, hospital, or as an independent practitioner, you (or your organization) act as the Data Controller or Data Fiduciary. For individual practitioners operating outside the United States, your agreement to our Terms of Service governs our processing of your data in lieu of a custom Data Processing Agreement (DPA).
• Machine Learning Inference Partners — specialized cloud service providers that run our speech-to-text models. All inference partners operate under strict confidentiality obligations and executed HIPAA Business Associate Agreements (BAAs).
• Cloud Infrastructure Providers — secure cloud hosting platforms that store audio recordings, transcripts, and account data, operating under executed HIPAA BAAs.
• Payment Processors — PCI-DSS certified third-party billing providers (who do not receive any audio or transcripts).
• RADPAIR employees and contractors — under a confidentiality obligation, only as needed to operate, support, and improve the service.

We do not share data with any other third parties unless required by law (subpoena, warrant, court order, or other legal process). If RADPAIR is involved in a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of that transaction, subject to the same privacy commitments outlined in this policy and applicable Chrome Web Store policies.

4.Data retention

• Audio: retained for as long as necessary to fulfill the model improvement and support purposes outlined in this policy, or until you request deletion (see Section 6).
• Transcripts: retained for as long as necessary to fulfill the model improvement and support purposes outlined in this policy, or until you request deletion.
• Session metadata: retained for the life of your account.
• Account data: retained for the life of your account, plus a limited window after cancellation as required by tax and accounting law.

5.Security

• All audio and transcript traffic between your browser and our servers is encrypted in transit using industry-standard protocols, such as TLS 1.2+ and WSS for streaming WebSockets.
• Audio and transcripts are encrypted at rest using advanced encryption standards (such as AES-256).
• Access to stored audio and transcripts is restricted to RADPAIR personnel under a confidentiality obligation, and audited.

6.Your choices

• Stop dictating: press Stop in the popup, or close the popup — audio capture ends.
• Uninstall: removes the extension and all locally stored preferences. Does not delete server-side audio / transcripts — request that separately (next bullet).
• Request deletion of your audio and transcripts: email privacy@radpair.com from the email address associated with your account. We will delete your stored audio and transcripts from our primary production systems within 30 days. Residual copies may persist in our secure, encrypted backups for up to 90 days before being permanently overwritten. Upon receipt and processing of a verified deletion request, your data will not be included in any future model training cycles. Please note that this deletion applies to future training only and cannot be applied retroactively to models previously trained using your de-identified data.
• Cancel your subscription: from the account dashboard. Cancellation stops auto-renewal and prevents future billing cycles.
• Export your account data: email privacy@radpair.com.

7.International Users and Regional Privacy Rights

PAIR Speech is operated from the United States. If you are accessing the extension from the European Economic Area (EEA), the United Kingdom, India, or other regions with laws governing data collection and use, please note that your data will be transferred to, processed, and stored in the United States.

Data Transfers: Where required by law, we rely on approved data transfer mechanisms, such as Standard Contractual Clauses (SCCs), or rely on the execution of our Terms of Service or a Data Processing Agreement (DPA) with your employer or healthcare organization.

Your Global Privacy Rights: Depending on your jurisdiction (such as under the GDPR, UK GDPR, CCPA/CPRA, or India’s DPDP Act), you may have the right to access, correct, delete, or restrict the processing of your data, or withdraw consent. To exercise any of these rights, please email privacy@radpair.com. We will respond to your request within the timeframe required by your local laws.

8.Children

PAIR Speech is not directed at users under 18, and we do not knowingly collect data from anyone under 18.

9.Changes

We may update this policy. We will publish the updated policy at the URL above and, for material changes, notify active users by email at least 30 days before the change takes effect.

10.Contact

• Privacy questions / data requests: privacy@radpair.com
• Support: support@radpair.com
• Postal: 6312 Kingston Pike Ste 100, Knoxville, TN 37919