Browser extension privacy notice

1. The short version

The extension reads nothing from a page until you press record. When you do, it records your voice, sends the audio to the UnityPulse transcription service over an encrypted connection, and puts the finished text into the field you chose. Audio is deleted after the text is returned. Your sign-in, settings, templates and interrupted drafts are kept in your browser. Page content is never sent to us.

2. What the extension reads from a page

Only the field you point it at, on the tab you invoke it on, at that moment: its current contents, so that “say only what changed” can work, and its type, so the text can be placed correctly. For “Fill this form with UnityPulse” (Ureport accounts), it also reads the visible labels and current values of the fields on the form you chose, so it can match your dictation to the right fields and avoid overwriting anything already filled in. This matching happens in your browser.

It does not read other tabs, other pages, page content outside the field or form you chose, cookies, passwords or your browsing history.

3. When it records

Only when you start a recording: by choosing “Dictate with UnityPulse” or “Fill this form with UnityPulse” from the right-click menu, or by pressing the floating microphone button. The microphone is released when you stop. The floating button is shown while the extension is switched on so you can start without opening the menu; it does not listen on its own.

4. Where audio goes

Audio is sent, encrypted in transit (TLS 1.2 or higher), to the UnityPulse transcription service and on to our AI transcription and language providers, which return the draft. The audio is deleted after the draft is returned. It is not cached, archived or used to train models. Live captions shown while you speak are display-only and never stored.

5. What it writes to a page

The finished text, into the field you chose. For form filling, the values you approved in the review step, into the fields you ticked. Pre-filled fields are never overwritten unless you tick them. Nothing is written anywhere you did not point at.

6. What it stores in your browser

• Your UnityPulse sign-in session, so you do not sign in every time
• Your settings, such as output language and whether the floating button is shown
• Your templates, whether or not you have turned on cloud sync in the app
• Interrupted drafts, so a recording cut short by a closed tab or lost connection can be retried

This data lives in the browser’s extension storage on your device. Removing the extension removes it. It is not synced by us to other browsers.

7. Permissions

The store shows a list of permissions at install time. Each one, and what it is for:

Permission	Why
Microphone	To record your dictation while you are recording. Nothing is recorded until you press record.
Access to the site you are on (activeTab / host access on the current page)	To place the text in the field you chose and, for form filling, to read the labels and current values of the form you chose. Only on the tab you invoked it on.
Context menus	To add “Dictate with UnityPulse” and “Fill this form with UnityPulse” to the right-click menu.
Storage	To keep your session, settings, templates and interrupted drafts in the browser.

We do not request permission to read your browsing history, to run on all sites in the background, to access other extensions, or to read clipboard contents without your action.

8. What it sends to UnityPulse

• Your audio, to be transcribed, deleted after the draft is returned
• Your account identity, to charge credits to the right account and to apply your organisation’s settings
• The name of the template you chose, if any, so the draft follows it
• Anonymous usage signals (that a dictation started, its duration, whether it succeeded) not linked to patient data

It does not send the page URL, page content, field labels, form values or anything else from the page.

9. What it never does

• Read pages in the background or when you are not recording
• Collect or transmit browsing history
• Send page content or form data to UnityPulse
• Write into a field you did not point it at
• Sell or share data with advertisers
• Use your dictation to train AI models

10. Organisation accounts

If you sign in with an account that belongs to an organisation, dictations consume the organisation’s shared credits within the limit your administrator set, and your administrator can see that you used the extension and how much, and the device you signed in from. They cannot see what you dictated or where you put it.

11. Removing the extension and your data

Remove the extension from your browser’s extensions page. This deletes its stored session, settings, templates and drafts from that browser. Your UnityPulse account is unaffected; to delete the account itself, see how to delete your account and data.

12. Changes

If we change what the extension reads, sends or stores, we will update this notice and the date at the top, and where the change is material, notify signed-in users in the extension. A new permission is always requested through the browser, which shows you what changed before it is granted.

13. Contact

Questions about the extension? Reach us at hello@unitypulse.io or through the contact page. The general Privacy Policy and the End User Licence Agreement also apply.