Privacy Policy
Last updated: May 11, 2026
Introduction
Whisper ("we," "us," "our," or "the Extension") is committed to protecting your privacy. This Privacy Policy explains how the Whisper browser extension collects, uses, discloses, and otherwise processes your personal information.
Data We Collect
Authentication & Account Data
- Google account email address (from OAuth sign-in)
- Cognito user ID and authentication tokens
- API keys for service access
User Preferences
- Writing style selections
- Theme preference (light/dark mode)
- Email template settings
Voice & Transcription Data
- Voice audio recordings (processed in real-time for transcription)
- Transcribed text from voice input
- Language and style preferences for transcription
Usage & Error Data
- Error reports and debug information
- Extension version and browser information
- Feature usage statistics (anonymized)
How We Use Your Data
- Authentication & Account Management: To verify your identity, manage your account, and keep your account secure
- Service Delivery: To provide voice transcription, AI-powered writing assistance, and other features
- Service Improvement: To understand how you use the extension and improve features
- Error Tracking: To identify and fix bugs and technical issues
- Security & Compliance: To prevent fraud, abuse, and enforce our terms of service
Third Parties & Data Sharing
We work with trusted third-party service providers to deliver the extension's functionality:
Deepgram (Speech-to-Text)
Your voice audio is sent to Deepgram's API for real-time transcription. Deepgram processes audio according to their privacy policy and terms of service. Audio is not stored long-term by Deepgram.
AWS Services (Backend Infrastructure)
Your account data, preferences, and API key information are stored on AWS infrastructure. AWS provides secure data storage and access controls.
Amazon Cognito (Authentication)
Your authentication tokens and user identity are managed through Amazon Cognito, AWS's authentication and authorization service.
We do not sell or share your personal data with third parties for marketing purposes. We only share data necessary to provide the service.
Data Retention
- Authentication Tokens: Retained until logout, token expiry, or account deletion
- Voice Audio: Processed in real-time and not stored long-term (only transcribed text retained if you save it)
- User Preferences: Retained as long as your account is active
- Error Logs: Retained for up to 90 days for debugging purposes, then deleted
Your Privacy Rights
- Access: You can access your account data through your dashboard
- Correction: You can update your personal information and preferences in your account settings
- Deletion: You can delete your account and all associated data by contacting support@injecting.ai
- Opt-Out: You can disable the extension at any time through your browser's extension settings
Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by updating the date at the top of this policy and posting a notice in the extension.
Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us at:
Email: support@injecting.ai