Privacy Policy

Last updated: October 23, 2025

    Short version: STTBox never sees, stores, or transmits your voice audio or dictated text. Your audio is processed entirely by your browser or Microsoft Azure — not by us.
  

1. What We Collect

Audio data: STTBox does not collect, receive, store, or transmit your voice audio. Speech recognition is performed by:

Free tier: Your browser's built-in Web Speech API. Audio may be sent to the browser vendor's servers (e.g., Google Chrome sends audio to Google) for processing. STTBox itself never receives this audio.
Plus tier: Microsoft Azure Cognitive Services Speech API. Audio is sent to Microsoft Azure for processing. STTBox itself never receives this audio.

Dictated text: Text produced by speech recognition is inserted directly into the web page you are viewing. STTBox does not transmit, log, or store any dictated text.

2. Account Information

If you create an account (required for Plus features), we collect and store:

Your email address (via Google Sign-In)
Your subscription status (free or Plus)
Your subscription ID from Paddle (our payment processor)

This data is stored securely on Supabase, a GDPR-compliant infrastructure provider.

3. Personal Vocabulary

STTBox learns from words you correct while dictating. This personal vocabulary data:

Is stored locally in your browser using Chrome's built-in storage API
Never leaves your device on the free tier
May be synced to our servers for Plus users (to enable cross-device sync), and is encrypted in transit
Can be cleared at any time from the extension's Settings page

4. Extension Settings

Your language preference, toggle settings, and custom voice commands are stored using Chrome's chrome.storage.sync API, which syncs across your own Chrome profiles. This data is not accessible to us.

5. Payments

Payments are processed by Paddle. STTBox never receives, processes, or stores credit card or payment information. Paddle's privacy policy governs payment data.

6. Analytics

We do not currently use any third-party analytics or tracking services in the extension. The landing page (this website) may use standard web server access logs (IP address, browser type, pages visited) for operational purposes only.

7. Data Sharing

We do not sell, rent, or share your personal data with third parties, except:

Supabase (infrastructure hosting)
Paddle (payment processing)
Microsoft Azure (speech processing, Plus users only)
Google (speech processing via Web Speech API, free users)
As required by law

8. Data Retention

We retain account data as long as your account is active. You may request deletion of your account and associated data at any time by emailing us. We will process deletion requests within 30 days.

9. Children's Privacy

STTBox is not directed to children under 13. We do not knowingly collect personal information from children under 13.

10. Your Rights

You have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data
Export your data
Opt out of any future communications

To exercise these rights, contact us at privacy@STTBox.app.

11. Changes to This Policy

We may update this policy occasionally. Material changes will be notified via the extension or email. Continued use after changes constitutes acceptance of the updated policy.

12. Contact

For privacy-related questions: privacy@STTBox.app