← Back to home

Privacy Policy

Last updated: November 2026

1. Introduction

RadWeave (“we”, “us”, “our”) operates radweave.ai, RadWeave AI Reporting, a Microsoft Word add-in that lets signed-in users generate radiology reports inside Word, and RadWeave Capture, a Windows desktop application for collecting cases on your own computer. This policy explains how we collect, use, and share your personal information on the website and in the add-in; section 13 explains RadWeave Capture.

2. Information We Collect

  • Account information: name, email address when you register
  • Usage data: reports generated, templates used, credits consumed
  • Report content: the text you submit to generate a report and the report that is generated (see sections 8 to 10)
  • Templates: report templates you save in My Templates
  • Payment information: payments are handled by Stripe on its hosted checkout page; RadWeave does not collect card details itself
  • Technical data: IP address, browser type, device information

3. How We Use Your Information

  • To provide and improve our services
  • To generate the reports you request
  • To send account-related emails (confirmation, password reset)
  • To process payments and manage subscriptions
  • To monitor usage and prevent abuse

4. Data Storage and Sharing

  • Your account, report, template and usage data is stored in Supabase, our database and authentication provider.
  • We share data with the service providers listed in section 7 to operate the service, as described in this policy.
  • Authorized RadWeave administrators and those service providers may have technical access to stored data as needed to operate the service.
  • We have not set a fixed retention period. See section 11 for what this means for reports, templates and closed accounts.

5. Your Data Requests

  • You can ask us to provide access to, correct, export or delete your personal data, or to close your account, by emailing contact@radweave.ai.
  • We handle these requests manually. We do not promise immediate action or a specific completion time, and we cannot currently confirm that every copy of your data, including copies held by third-party providers, will be removed. See section 11.

6. Cookies and Local Storage

  • We use cookies that are needed for sign-in, session management and access checks, and, if you choose to connect Google Drive, for that connection.
  • We use Vercel Web Analytics to measure page views. We configure it to remove query strings and fragments from page addresses and not to report pages in the sign-in, registration, account, dashboard, AI reporting, My Templates, viewer, DICOM case and admin areas; other pages you visit, including while signed in, may be counted.
  • The Word add-in keeps your sign-in session in the task pane's local browser storage on your computer so that you stay signed in. Choosing Sign out in the add-in removes it.

7. Third Party Services

8. RadWeave AI Reporting for Microsoft Word: Data Submitted When You Generate a Report

The add-in uses your RadWeave account and RadWeave's reporting service, the same service that powers AI reporting on the website. When you click Generate Report (or Generate from template), the add-in sends the following over HTTPS to RadWeave's servers, together with your sign-in token:

  • the study details you choose (modality, body region, study type, side)
  • the clinical indication, if you enter one, and the findings text you type
  • for My Templates, the template you selected and the abnormal findings you type

The add-in does not send the contents of your Word document. It inserts a generated report at your cursor only when you click Insert Formatted or Insert Plain Text.

9. AI Processing by Third Parties

  • Anthropic receives the text submitted for generation (and the template text, for My Templates) in order to write the report.
  • Voyage AI receives text derived from your input in order to compute embeddings used for matching templates and examples.

These providers process the text under their own terms and privacy policies, linked in section 7. We do not control their retention practices, and we make no statement about whether they retain or train on submitted data; please read their policies.

10. What We Store About Reports, Templates and Credits

  • Account: your user ID, email address and name, and your plan.
  • Credits and usage: credits used and limit for the current period, and usage records containing study type, body region, the AI model used, token counts and estimated cost.
  • Generated reports: the report text we generate for you is saved with your account, together with your user ID, email address, study type, region, model used, template names matched, token counts and estimated cost.
  • Typed text: the generated report is derived from the findings you type and may contain the same content. We have not found a separate stored copy of the raw text you type, but we cannot promise that no copy exists in logs or provider systems.
  • Templates: the templates you save in My Templates are stored with your account. Database access rules are intended to limit them to your signed-in account; see section 4 for who else may have technical access.
  • Payments: card payments are handled by Stripe's hosted checkout; RadWeave does not collect card details itself.
  • Google Drive import (My Templates): if you choose Import from Google Drive, you sign in with Google and allow only the “drive.file” permission. It lets RadWeave open only the files you choose in Google’s own file picker, not browse or search the rest of your Drive. RadWeave reads the files you choose (Google Docs, DOCX and TXT), extracts their text and shows it to you for review. Only the templates you confirm are saved to My Templates, and RadWeave does not retain the original files after import. Saved templates are handled like any other template, including the AI processing described in sections 8 and 9. Your Google access token is short-lived and is kept in an encrypted cookie in your browser, not in our database. You can choose Disconnect Google Drive in the import window, or remove access at myaccount.google.com/permissions.

11. Retention and Deletion Limitations

  • We have not set a fixed retention period, and no automatic deletion schedule for generated reports or saved templates has been confirmed.
  • We have not confirmed that closing an account automatically removes generated reports or saved templates, so please do not assume that it does.
  • The add-in does not offer self-service deletion of your account or of previously generated reports. To request access, correction, export or deletion of your data, email contact@radweave.ai. Requests are handled manually, are not guaranteed to be immediate, and have no promised completion time.
  • Deleting a document in Word does not delete the report we saved with your account.
  • Data already processed by third-party providers is governed by their policies (section 7).

12. Medical Data and Your Responsibilities

  • Do not enter patient-identifying information — such as names, medical record numbers or dates of birth — into any field in the add-in or on the website.
  • You are solely responsible for having the right to process any data you enter and for complying with the patient-privacy and data-protection laws that apply to you.
  • RadWeave is an AI-assisted tool for drafting radiology reports, intended to support qualified radiologists. Every generated report must be reviewed, corrected and verified by a qualified clinician before any clinical use, and the tool does not replace professional judgment. RadWeave has not determined whether it is regulated as a medical device in any jurisdiction; its regulatory classification is subject to separate assessment.
  • We do not claim that RadWeave is certified or compliant with HIPAA, GDPR, or any healthcare data-protection regime. Do not use it for identifiable patient data.

13. RadWeave Capture (Windows Desktop App) and Google Drive

RadWeave Capture collects cases, reports, notes and images, and imports DICOM studies, on your own computer. A RadWeave sign-in and an available trial or license are required to start new cases. Existing saved local cases remain accessible offline. Connecting Google Drive and enabling Auto Sync are optional.

  • Local data and DICOM: Capture keeps your cases in a database on your computer that is encrypted with a key protected by your Windows account. DICOM studies you import or receive are processed and stored on your computer only. In the current version, Capture does not send them (including original, unmodified studies) to RadWeave, to Google Drive, or to the AI services described in sections 8 to 10; those sections apply to text you submit on the website or in the Word add-in, and Capture does not use Anthropic or Voyage AI.
  • RadWeave account sign-in: To create new cases and check trial or license status, you sign in through your web browser on radweave.ai with your existing account. Capture does not see or store your password. It keeps the resulting sign-in session on your computer, protected by Windows, until you choose Sign Out. For the sign-in, our servers create a one-time code that is valid for two minutes and is stored only as a one-way hash.
  • Connecting Google Drive: If you choose Connect Google Drive, you sign in with Google. Capture requests only the “drive.file” permission, which lets it see and manage only the files and folder that Capture itself creates in your Drive, not your other files. The files use your own Google Drive storage. Your Google sign-in tokens are kept on your computer, protected by Windows; RadWeave's servers do not receive them. This is separate from the optional Google Drive import in My Templates on the website.
  • What is uploaded and how it is protected: Only when you choose Upload to Drive (or turn on Auto Sync for an item) and confirm, Capture uploads that case's report text, images, comments and notes, or a Research Project's data, as files encrypted on your computer before upload. In the current version, DICOM studies, including original studies, are not uploaded. The encryption key is created on your computer; a copy protected by a Recovery Code that is shown to you once is stored in your Drive so you can open your library on another computer. RadWeave does not receive your key or Recovery Code and cannot decrypt these files or recover them for you. If you lose the Recovery Code and every computer that has the library, the cloud copies cannot be read. In the current version, cloud files go directly between your computer and your Google Drive and are not sent to RadWeave's servers.
  • Auto Sync and Manual Sync: With Manual Sync you choose when to upload and sync. Auto Sync is off by default. When you choose it, Capture automatically uploads later saved changes only of items you have already uploaded to your Drive, and checks your Drive for updates in the background. It never uploads other or older cases on its own.
  • Revoking access and deleting: You can choose Disconnect Google Drive in Capture, or remove Capture's access at myaccount.google.com/permissions. This stops Capture from reaching your Drive but does not delete files already there. Capture does not delete cloud copies for you; to remove them, delete the “RadWeave Capture” folder in your Google Drive. Sign Out removes the RadWeave sign-in from your computer and does not delete your local cases. To request deletion of your RadWeave account data, see section 5.
  • Identifiable information: Capture cannot detect or remove patient-identifying text inside reports, screenshots or comments, and its DICOM anonymization feature does not guarantee that a study is free of identifying information. Upload only content you are allowed to store in your own cloud under the rules that apply to you (see section 12).
  • Google API Services User Data Policy: RadWeave Capture's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Capture uses your Google Drive files only to provide the cloud library you ask for.

14. Contact Us

For privacy questions and data requests contact: contact@radweave.ai

By using RadWeave, you agree to this Privacy Policy. View Terms of Service →