Privacy notice
What information PractoSA collects, why, where it is kept, and how to ask us about it. Last updated 23 August 2026.
Who we are
PractoSA is an AI receptionist and patient messaging service for medical practices in South Africa. You can reach us at hello@precto.app.
For information collected on this website, PractoSA is the responsible party under the Protection of Personal Information Act (POPIA). For patient information handled inside the product, the practice you deal with is the responsible party and PractoSA is the operator, processing that information on the practice's instructions.
This website
This website does not use analytics, advertising or tracking cookies.
If you email us to ask about early access, we keep your email address and what you wrote so that we can reply and follow up. We do not add you to any mailing list.
Practice accounts
When a practice signs up, we store the names and email addresses of the staff who use PractoSA, their passwords in hashed form, and their sign-in sessions. We store the practice's settings, such as working hours and which features are switched on.
Staff can only see their own practice. When our own support staff look at a practice's account, that access is recorded in the practice's audit log.
Patient information
On behalf of the practice, PractoSA handles patients' names, phone numbers, messages, call recordings and transcripts, appointment details, and invoices.
When the AI answers a call, it tells the caller at the start that it is an AI receptionist and that the call is recorded, before it asks for any information.
Patients' consent to be contacted, and any opt-out, is recorded once and applies on every channel. A patient who asks a practice to stop contacting them is not contacted.
Where information is kept
Patient information is stored on servers in South Africa.
The voice AI runs on servers we operate. Call audio is not sent to a third-party AI service.
Messages are delivered through the provider for that channel, for example WhatsApp or an SMS provider, to the extent needed to deliver them.
Security
Each practice's data is separated at the database level. Personal fields are encrypted with a separate key for each practice. Every action taken in a practice, by staff or by the AI, is written to an audit log that can be added to but not edited.
How long we keep it
The practice sets how long records are kept, in line with POPIA and the HPCSA's record-keeping requirements. When a patient asks a practice to delete their information, the practice does that in PractoSA and the information is not brought back by a diary sync.
Early-access enquiries are deleted once we have replied and the practice has either joined or told us it is not going ahead.
Your rights
You can ask what information we hold about you, ask for it to be corrected or deleted, and object to how it is used.
If you are a patient, contact your practice. They hold your record and can act on it in PractoSA. If you are practice staff or you emailed us through this website, email hello@precto.app.
You can also complain to the Information Regulator of South Africa at inforegulator.org.za.
The United Kingdom
PractoSA is not yet available in the United Kingdom. A UK privacy notice will be published before it is.
Changes to this notice
When we change this notice we update this page and the date at the top.
This notice will be reviewed by a lawyer before PractoSA is generally available. If anything here is unclear, email us and we will explain it. The terms and conditions are at /terms.