Privacy Policy

RadTypist is operated by Vixo Digital Pty Ltd, the data controller responsible for your information. For any privacy question, or to exercise your rights, contact us at support@radtypist.com.

• Account data — your email address, used for passwordless sign-in.
• Service content — your dictation (spoken live, uploaded as a recording, or typed), the drafts and reports made from it, and the text templates and settings you create. By design this is de-identified clinical dictation only and must contain no patient identifiers.
• Billing data — handled by our payment processor; we do not store your card details.
• Outreach contacts — if we email you about RadTypist, we hold business contact details (such as your practice name and a business email address) obtained from publicly published business listings.
• Usage data — basic, aggregated analytics collected on our public marketing pages (see section 7).

• Provide the Service — convert your dictation into a formatted report.
• Authenticate you — send one-time sign-in links to your email.
• Process billing for paid plans.
• Respond to your enquiries and support requests.
• Contact radiology businesses to introduce the Service (see section 5).
• Maintain security, prevent misuse, and improve the Service.

• De-identified only. RadTypist is built for de-identified dictation; you are responsible for ensuring recordings and reports contain no patient identifiers.
• Live dictation audio streams from your browser to our speech-recognition provider and is not stored by RadTypist.
• Uploaded recordings are stored only transiently and are deleted as soon as they are transcribed.
• Drafts and reports are stored in your account until you delete them or close your account.
• Data is encrypted in transit (TLS) and at rest, and scoped to your account.
• Access and erasure actions are recorded in an audit log.
• Analytics is deliberately not loaded on the authenticated app, so PHI-adjacent pages send no usage signals to third parties.

If you received an email from us introducing RadTypist, we contacted you as a business whose contact address is publicly published and relevant to radiology or medical reporting. Our lawful basis is our legitimate interest in reaching relevant businesses (and, for recipients in the UK/EU, this is balanced against your interests).

You can opt out at any time by replying “unsubscribe” to any message; we record the request and will not contact you again. We do not sell your contact details, and we use them only to introduce the Service and respond to your reply.

We rely on a small number of third-party providers, each processing data only to perform its function:

• AI processing providers — recognise live dictation, transcribe uploaded recordings, and structure drafts into reports, via their APIs. Under those API terms they do not use your content to train their models.
• Payment processor — handles billing (billing details only; never your clinical content).
• Transactional email provider — delivers your sign-in links (your email address only).
• Outreach email provider (Amazon SES) — delivers our outreach messages to business contacts.
• Cloud hosting & storage — hosts and stores your reports on encrypted cloud infrastructure.
• Analytics provider (Google Analytics) — aggregated usage on our public marketing pages only.

Some processing may occur outside your country. Because you submit de-identified data only, no patient personal information is shared with these providers.

On our public marketing pages (such as the homepage, sign-in, terms, and this page) we use Google Analytics to understand aggregated traffic. This may set cookies. We deliberately do not load analytics on the authenticated app or admin surfaces, where dictation and report drafts appear. You can block or clear cookies in your browser at any time; the Service still works without them.

• Live dictation audio — not stored.
• Uploaded recordings — deleted as soon as they are transcribed.
• Drafts, reports, text templates & account data — kept until you delete them or close your account.
• Outreach opt-outs — we retain a suppression record so we can honour your request not to be contacted.

Depending on where you are, you may have the right to:

• access the personal information we hold about you;
• have it corrected if it is inaccurate;
• have it deleted, or export your reports;
• object to processing based on legitimate interests — including our outreach;
• withdraw consent where we rely on it.

To exercise any of these, email support@radtypist.com. If you are in Australia you may also complain to the Office of the Australian Information Commissioner (OAIC); if you are in the UK, to the Information Commissioner’s Office (ICO).

We may update this Privacy Policy from time to time. The version and effective date appear at the top of this page. Material changes will be notified in-app or by email.

Questions about your privacy or this policy? Email support@radtypist.com.