PAIRsense Privacy Policy

Effective date: February 23, 2026

PAIRsense ("we", "our", "the extension") is a Chrome extension that transcribes doctor-patient conversations and auto-fills Electronic Medical Record (EMR) form fields. This policy explains what data we process, how it is handled, and how it is protected.

1. Data We Process

Audio recordings. When you click "Record", the extension captures microphone audio of the doctor-patient consultation. Audio is uploaded to our secure servers for transcription and is automatically deleted within 7 days.

Transcriptions. Audio is transcribed using PAIRscribe, our proprietary speech-to-text service. The resulting transcript text is stored temporarily (up to 24 hours) on our servers to perform clinical data extraction.

Extracted clinical data. Transcripts are processed by PAIRvision, our proprietary AI service, to extract structured medical fields (e.g., symptoms, diagnoses, medications). Extracted data is stored temporarily (up to 24 hours) and is used solely to fill EMR form fields.

EMR page structure. The extension reads form field labels, roles, and options from the current EMR page using the browser's accessibility tree. This structural data is used to map extracted values to the correct fields. No patient data is read from the EMR — only the empty form structure.

Authentication tokens. We use Auth0 for user authentication. We receive and verify OAuth 2.0 tokens to identify the signed-in user (email and hospital affiliation). We do not store passwords.

Cached playbooks. When the extension learns the layout of an EMR form, the field structure is cached for up to 30 days so you don't have to re-scan forms on repeat visits. Playbooks contain form field names and navigation steps — no patient data.

2. Data Retention

• Audio files: Automatically deleted after 7 days
• Session data (transcripts, extractions): Automatically deleted after 24 hours
• Form playbook cache: Automatically deleted after 30 days
• Audit logs: Retained for 365 days for compliance (all patient health information is stripped before storage)

3. Third-Party Services

We use the following third-party services strictly for the extension's core functionality:

• PAIRscribe — Our proprietary speech-to-text transcription service
• PAIRvision — Our proprietary AI service for clinical data extraction and form structure analysis
• Auth0 — User authentication and token management
• Amazon Web Services (AWS) — Secure server infrastructure, data storage, and processing

Data sent to these services is used only for processing and is governed by our internal data handling policies and AWS's data processing agreements.

4. Data Security

• All data in transit is encrypted via HTTPS/TLS
• Audio files are stored with server-side encryption on AWS S3
• API keys and credentials are stored in AWS Secrets Manager
• All sessions are scoped to the authenticated user's hospital for data isolation
• Audit logs are sanitized to strip patient health information (names, identifiers, diagnoses, medications) before storage
• Every API request requires a valid JWT authentication token

5. Data We Do Not Collect

• Browsing history or web activity outside the active EMR tab
• Personal information about the clinician (beyond email for authentication)
• Financial or payment information
• Device location
• Keystroke logging, mouse tracking, or click monitoring

6. Your Rights

You may:

• Stop recording at any time — no audio is captured without your explicit action
• Clear your session at any time using the "Clear & Next Patient" button, which removes all in-memory data
• Uninstall the extension at any time to cease all data processing
• Request deletion of your data by contacting us at the email below

7. Changes to This Policy

We may update this policy as the extension evolves. Material changes will be communicated through the extension's update notes on the Chrome Web Store.

8. Contact

For questions about this privacy policy or to request data deletion, contact us at:
privacy@drpair.com