Privacy Policy — SpeechPilot

The German version of this policy is the authoritative one; this translation is provided for understanding. The German version is at speechpilot.vip/datenschutz.html.

Last updated: 29 August 2026

Controller

Benjamin Alexander Bertl Calle Padre Esteban 29, bj izq 38611 San Isidro, Santa Cruz de Tenerife, Spain NIE X5979615Y Questions and requests for information: contact@speechpilot.vip

Controller within the meaning of the General Data Protection Regulation (GDPR) and of the Spanish LOPDGDD.

In brief

SpeechPilot dictates what is spoken into the input field the cursor is in. Dictated texts, macros and lists are not transmitted to the publisher. There is no advertising, no tracking, no disclosure and no sale of data.

If the local language pack is installed, speech recognition also takes place on the device — in that case neither audio nor text leaves the computer. Without the pack, Google handles recognition. Besides that, the following leave the device: the browser's synchronisation of settings and, only when paid features are purchased, payment processing. All three are described below.

Legal bases

The processing of voice input and of the lists you create takes place in order to perform the user relationship and at your instigation (Art. 6(1)(b) GDPR). Payment processing takes place for the performance of a contract (Art. 6(1)(b) GDPR) and, where retention obligations exist, for compliance with legal obligations (Art. 6(1)(c) GDPR).

What data is processed

1. Voice input

When the microphone is switched on, SpeechPilot records via the speech recognition built into the browser. Where that recognition takes place depends on whether a local language pack is installed:

With the language pack installed (the default where available). Chrome recognises speech on the device. Neither the recording nor the recognised text leaves the computer. Whether this route is active is shown in the options under “On-device recognition”; the language pack is downloaded there at the press of a button (once, about 60 MB per language). It can also be switched off there.

Without a language pack. Chrome transmits the recording to Google servers for recognition and returns the finished text. This is part of the browser, not of the extension. Everything present at the microphone while dictating is recorded. Google's privacy policy applies: https://policies.google.com/privacy

If on-device recognition returns no results, SpeechPilot switches to the second route for the current session and points this out with a message.

In both cases SpeechPilot stores neither the recording nor the recognised text. The text is written into the input field and not retained afterwards. The microphone runs only while it is switched on.

2. Settings and your own lists

Stored on the device are: recognition language and switches, the replacement list, emoji words, macros (shortcuts and their associated texts), the lists and profiles of the bar together with the stored texts and field positions, as well as display settings such as position and width.

Storage takes place in chrome.storage:

• storage.local — stays on this device: macros, the bar, usage records, positions.
• storage.sync — recognition language, replacement list, emoji words and the switches. Chrome synchronises this area between the user's devices via the signed-in Google account. This too is a function of the browser; the publisher has no access to it.

All content originates from the user's own entries. Anyone who places no personal data in macros or replacements stores none either.

3. Content of the visited page

SpeechPilot does not read the content of the visited page and does not transmit it anywhere. Access is limited to the input field being written into and — for the bar's field mapping — to the position of input fields within the page. Password fields and fields for payment data are excluded: nothing is read or written there.

Access takes place only after the user has clicked the extension's icon or pressed the keyboard shortcut, and only in the active tab (activeTab permission). The extension does not run in the background on all pages.

Permissions and what they are for

Microphone access is requested by Chrome itself and can be withdrawn at any time in the browser settings.

Deleting data

All stored data is held in the browser profile. It is removed completely when the extension is uninstalled. Individual sets can be deleted in the options; there is also an export to a file there.

Payment processing

Paid features are sold via Lemon Squeezy (Sold through Link, LLC, Salt Lake City, USA). Lemon Squeezy acts as the seller (merchant of record); the purchase contract for the paid licence is concluded with that company, which also remits value added tax.

Without a purchase. Anyone who uses the extension only free of charge transmits no data to Lemon Squeezy. The extension does not establish a connection there of its own accord.

When purchasing. The purchase takes place on Lemon Squeezy's pages. The data required for the contract is collected there: email address, payment data and the details required for the calculation of tax (in particular the country). Payment data is processed by Lemon Squeezy and its payment service providers; the publisher does not receive full card details.

What the publisher sees. The order data can be viewed in Lemon Squeezy's merchant area: email address, time, amount, country and status of the order. [To be checked after the first test purchase and the exact scope entered here.]

Activation. After the purchase a licence key is sent by email. It is entered in the extension's options and stored locally there. To verify it, the extension sends this key to api.lemonsqueezy.com; for technical reasons the IP address is transmitted in the process. Only the licence key and a device identifier are transmitted — no dictated texts, no macros, no list content.

Legal basis. Performance of a contract under Art. 6(1)(b) GDPR; for statutory retention obligations Art. 6(1)(c) GDPR.

Transfer to the USA. Lemon Squeezy is based in the United States. The transfer is based on the provider's data processing agreement including the EU standard contractual clauses: https://www.lemonsqueezy.com/dpa

Further information. Lemon Squeezy — privacy policy: https://www.lemonsqueezy.com/privacy Lemon Squeezy — data processing agreement: https://www.lemonsqueezy.com/dpa

[Before publication: check the provider's exact details on retention periods and sub-processors and add them here.]

Recipients

Google (account synchronisation, and speech recognition only without an installed language pack — both part of the browser) and — only when paid features are purchased — Lemon Squeezy as the seller. None beyond these.

Limited Use

SpeechPilot's use of data meets the requirements of the Chrome Web Store Limited Use Policy.

Your rights

You have the right at any time to:

• Access to information on whether and which data is processed (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to the processing (Art. 21 GDPR)

You can delete the data stored on the device yourself: via the extension's options page or by uninstalling it.

For access to and erasure of data that has arisen in the course of payment processing, a message to contact@speechpilot.vip is sufficient.

Right to lodge a complaint. You can lodge a complaint with a data protection supervisory authority. The competent authority is the Spanish data protection authority:

Agencia Española de Protección de Datos (AEPD) C/ Jorge Juan 6, 28001 Madrid https://www.aepd.es

You can also contact the supervisory authority of your country of residence.

Changes

Changes to this policy will be published at the same address. The date given above is authoritative.