Browser extension privacy notice

1. The short version

The extension records nothing and sends nothing until you start a dictation. When you do, it records your voice, sends the audio to the UnityPulse transcription service over an encrypted connection, and puts the finished text into the field you chose. Audio is deleted after the text is returned. Your sign-in, settings, templates and interrupted recordings are kept in your browser. The contents of the pages you use are never sent to us. The one thing taken from a page is the field labels of a form you ask it to fill, so each value can go in the right field.

2. What the extension reads from a page

The extension runs on the pages you visit so it can show the dictation button on text fields. Until you start a dictation it only notices which field you are in; it does not read what the page or the field contains.

When you dictate into a field, it works with that field on that tab, so the text can be put in the right place. For "Fill this form with UnityPulse", it also reads the visible labels and current values of the fields on the form you chose, so it can match your dictation to the right fields and avoid overwriting anything already filled in. The values are used in your browser and are not sent to us.

It does not read other tabs, page content outside the field or form you chose, cookies, passwords or your browsing history.

3. When it records

Only when you start a recording: by choosing "Dictate with UnityPulse" or "Fill this form with UnityPulse" from the right-click menu, or by pressing the dictation button on a field. The microphone is released when you stop. The button is shown while the extension is switched on so you can start without opening the menu; it does not listen on its own.

Your browser asks for permission to use the microphone the first time. In Chrome and Edge the recording runs in a private extension page that you do not see. In Firefox it runs in a small UnityPulse recorder window that opens when you start and closes by itself when you are done. In every browser the website you are on never gets access to your microphone or your recording.

4. Where audio goes

Audio is sent, encrypted in transit (TLS 1.2 or higher), to the UnityPulse transcription service and on to our AI transcription and language providers, which return the draft. The audio is deleted after the draft is returned. It is not cached, archived or used to train models. If live captions are switched on, audio is sent while you speak so the captions can be shown; the captions are display-only and never stored.

5. What it writes to a page

The finished text, into the field you chose. For form filling, the values you approved in the review step, into the fields you ticked. Pre-filled fields are never overwritten unless you tick them. Nothing is written anywhere you did not point at.

If the text cannot be put into its field (for example because the page changed while it was being processed), it is copied to your clipboard instead so it is not lost. The clipboard is never written otherwise, and never read.

6. What it stores in your browser

• Your UnityPulse sign-in session, so you do not sign in every time
• Your settings, such as output language and whether the dictation button is shown
• The templates handed over by Ureport or TScribe from the same browser
• Recordings that were interrupted before they were processed, so they can be sent again. They are deleted automatically after seven days, or as soon as you delete them or they are delivered
• A random identifier created when the extension is installed, used to apply fair-use limits to this browser

This data lives in the browser's extension storage on your device. Signing out removes your session and your templates. Removing the extension removes all of it. It is not synced by us to other browsers.

7. Permissions

The store shows a list of permissions at install time. Each one, and what it is for:

Permission	Why
Read and change data on the websites you visit	To show the dictation button on text fields on whatever site you write notes in, and to put the result into the field you chose. Nothing is read from a page until you start a dictation, as described above.
Access to unitypulse.io, ureport.io and tscribe.io addresses	To sign you in, send recordings for transcription, and find an open Ureport or TScribe tab for your templates and for "Go to Ureport" or "Go to TScribe". No other sites are contacted.
Identity	To open UnityPulse's own sign-in page in a separate window, so the extension receives a sign-in code and never your password.
Microphone (asked by the browser when you first record)	To record your dictation while you are recording.
Offscreen document (Chrome and Edge)	To record and play back your recording in a private extension page, so the audio is never handed to the website you are on.
Context menus	To add "Dictate with UnityPulse" and "Fill this form with UnityPulse" to the right-click menu.
Active tab and scripting	To act on the tab you are in when you use the right-click menu, and to add the dictation button to tabs that were already open when the extension was installed or updated.
Storage	To keep your session, settings, templates and interrupted recordings in the browser.
Alarms	To run an hourly clean-up that deletes interrupted recordings older than seven days, even if you have stopped using the extension.
Clipboard write	To copy a finished result to your clipboard only when it could not be put into its field.

Firefox also shows, before you install, the kinds of data the extension sends: health information (your dictation), personally identifying information (names you dictate and your account details) and authentication information (your sign-in). We do not request permission to read your browsing history, to access other extensions, or to read your clipboard.

8. What it sends to UnityPulse

• Your audio, to be transcribed, deleted after the draft is returned
• For a whole-form fill, the form's field labels (not what the fields contain), so each value can be matched to its field
• The template and writing mode you chose, your output language and the recording's length
• Your account identity, to charge credits to the right account and to apply your organisation's settings
• The random identifier described above, used to apply fair-use limits to this browser

It does not send the page address, page content, form values or anything else from the page.

9. What it never does

• Record unless you start a recording
• Read pages in the background
• Collect or transmit browsing history
• Send page content or form values to UnityPulse
• Write into a field you did not point it at
• Include analytics, advertising or tracking
• Sell or share data with advertisers
• Use your dictation to train AI models

10. Organisation accounts

If you sign in with an account that belongs to an organisation, dictations consume the organisation's shared credits within the limit your administrator set, and your administrator can see that you used the extension and how much, and the device you signed in from. They cannot see what you dictated or where you put it.

11. Removing the extension and your data

Remove the extension from your browser's extensions page. This deletes its stored session, settings, templates and interrupted recordings from that browser. Your UnityPulse account is unaffected; to delete the account itself, see how to delete your account and data.

12. Changes

If we change what the extension reads, sends or stores, we will update this notice and the date at the top, and where the change is material, notify signed-in users in the extension. A new permission is always requested through the browser, which shows you what changed before it is granted.

13. Contact

Questions about the extension? Reach us at hello@unitypulse.io, at unitypulse.io@gmail.com, or through the contact page. The general Privacy Policy and the End User Licence Agreement also apply.