HUVA Scribe Lite Privacy Policy

Last updated November 5, 2026

Huver, Inc., a Delaware corporation, operates HUVA Scribe Lite. Our business address is 1111B South Governors Avenue, STE 34419, Dover, DE 19904, United States. Read the HUVA Privacy Policy, version 2026-11-05.1, for the complete company privacy notice, privacy rights, and product-specific retention and processing details. This page provides additional Scribe Lite workflow information; the versioned HUVA Privacy Policy controls if a summary here differs.

HUVA Scribe Lite helps clinicians record a visit, review a generated note and ICD-10-CM/CPT suggestions, and enter the clinician-approved content into the selected supported eClinicalWorks or Elation encounter.

Information processed

The workflow processes information needed for the selected visit: patient and encounter identifiers, displayed medical history, allergies, medications and prior context, visit audio, transcript, clinician notes, generated note fields, code suggestions, and entry-verification results. Authentication uses the clinician's HUVA account, including name, email and session credentials.

The extension requests access to all HTTP and HTTPS websites to support clinic-specific EHR addresses. Access permission alone does not initiate recording or note entry. The extension reads the supported EHR page's relevant content and controls to identify the visit and perform the clinician-directed workflow. The current workflow reads an available previous completed Progress Note and displayed medications or allergies while recording continues. It does not edit the prior note or use Carry Forward. Earlier extension versions may use Medical History Carry Forward in the current encounter. Reference records support preparation of a new draft for the selected current visit. With the clinician-directed medication review, the extension can read eCW External Rx History and eCW medication safety alerts, including their database edition. External history requires the applicable eCW access and patient consent; the extension does not answer the consent prompt. The safety alerts cover medications recorded in eCW, and do not establish that draft-only prescriptions or unconfirmed historical medications have been checked. Accepted suggestions update the note only and do not send, cancel or change a prescription.

Use and sharing

Information is used to provide authentication, transcription, note preparation, clinician review, and the requested EHR entry. Required providers include HUVA cloud services, Clerk for authentication, Google Cloud/Vertex AI for transcription and generation, Stripe for payment processing, and the selected supported EHR as the destination. Information is not sold or used for advertising, data brokerage, credit decisions, or unrelated analytics.

Recording, storage and retention

After the clinician starts recording and permits microphone use, audio is uploaded in approximately 20-second chunks during recording. Pending audio remains in browser memory; it is not saved as an audio file in Chrome local or sync storage. Closing the side panel does not stop recording, while closing the browser may lose unsent audio. The clinician should reopen the panel and stop recording explicitly.

The server processes audio for transcription without retaining raw audio in the temporary visit state. Transcripts, clinician notes, collected context and generated drafts are held in encrypted temporary workflow state with an eight-hour retention configuration.

Chrome extension storage contains authentication and workflow recovery state and disclosure acceptance. Clinical text and raw audio are not retained in Chrome local or sync storage. Credentials are not exposed to the EHR page. Approved content written into the EHR is retained under the healthcare organization's and EHR provider's policies; deleting a temporary HUVA session does not delete the EHR record.

Personal note formatting

Account formatting settings are stored separately from temporary visits. Only enumerated presentation choices, saved versions, layout-change counts and bounded hashes of opaque workflow IDs are retained until reset. These settings are encrypted and scoped to the signed-in HUVA account. Example notes supplied in the formatting editor are analysed in browser memory and are not uploaded or saved as account preferences. Formatting feedback compares the generated draft with clinician edits in the existing temporary encrypted workflow. Clinical words, doses, findings and patient identifiers are not learned as account preferences. Suggested changes require the clinician to preview and save them before they affect future recordings. The clinician can disable suggestions, dismiss them, restore a saved format or reset the settings and their history.

Optional phone recording

Phone recording is optional. A QR invitation pairs one phone with the selected visit; its link contains an opaque access capability, not patient identifiers. The paired phone can record audio, review and edit the visit draft and codes, request note entry through the connected desktop extension, and view entry results. Pairing capabilities and recovery state are kept in the phone tab session storage; clinical text and audio remain in memory. Keep the phone page visible while recording. Screen lock, calls, or closing the tab may interrupt capture or lose unsent audio. Pairing expires with the temporary visit or when disconnected from the extension. Finalization remains a separate action on the computer.

Subscriptions and credits

When billing is enabled, Stripe hosts subscription, additional-credit and payment-management pages. HUVA sends Stripe an account identifier and product, plan and policy metadata. Clinical content, transcripts and raw audio are not included in billing metadata. Payment-card details are entered on Stripe's pages, not in Scribe Lite.

HUVA retains nonclinical subscription status, payment reference IDs, credit grants and usage records, including recording duration, to manage balances and prevent duplicate charges. These billing records are separate from temporary clinical workflow data and do not expire with the eight-hour visit. Deleting or expiring a temporary visit does not remove its billing history.

Clinician control and security

The clinician opens the intended EHR encounter, accepts the workflow disclosure, reviews the draft and suggestions, initiates entry, reviews the result checklist, and confirms finalization separately. Lite uses packaged integration code, allowed origins, authenticated APIs, encrypted temporary state, and readback checks. It stops when it cannot verify the intended destination or an uncertain write result.

Account closure and privacy requests

You may withdraw from this product through its account controls after canceling automatic subscription renewal. Withdrawal ends product access and invalidates existing product sessions. It does not automatically refund payments or reset credits or trial history. Common HUVA Account identity and access to other products are managed separately. Temporary clinical records expire under their existing retention settings. Approved EHR records remain with the responsible healthcare organization. Subscription, payment, credit, usage and security records may remain for billing, dispute handling, fraud prevention and applicable recordkeeping obligations.

Contact HUVA to request access, correction, a copy or deletion of your information. We verify identity and authority as appropriate and apply applicable retention requirements. Patients and representatives should contact their healthcare organization about medical records.

Limited use

HUVA follows the Chrome Web Store User Data Policy, including its Limited Use requirements. Extension-accessed information is used to provide or improve the disclosed clinical workflow and is shared only as needed to provide that workflow, protect security or comply with law. It is not sold or used for advertising or creditworthiness decisions.

Contact and updates

For privacy questions or requests to Huver, Inc., email issong@huver.ai and identify the product and organization involved. Avoid sending patient records or credentials in your initial message. Material changes to these practices will be reflected in the HUVA Privacy Policy and the extension disclosure, with additional notice or consent when required.