Privacy, answered plainly.

Last updated: September 9, 2026

Presto was built by a physician who refused to put a microphone in his consulting room. The entire product is designed around a simple idea: the less information we hold, the less can ever go wrong with it. This page says what that means in practice, in plain language.

Patient information: we're built not to keep it

Presto does not record your consultations. There is no ambient listening, ever. You type or dictate your own clinical shorthand — a professional summary in your words — and Presto writes the letter from that.

You are instructed, in the product itself, to keep your shorthand de-identified: no patient names, health-card numbers, or other direct identifiers. The letter comes back with placeholders for anything identifying, which you complete inside your own EMR.

When you generate a letter, your shorthand travels from your browser to our server and on to our AI provider, the letter travels back, and that is the end of it: we do not store your shorthand or your letters on our servers after the request completes. There is no server-side archive of your clinical documents to breach, subpoena, or leak. Your letters live where they belong — in your EMR, under your custodianship.

Under Ontario's health-privacy law (PHIPA), you remain the health information custodian. Presto is a documentation tool acting on the de-identified instructions you give it; every document requires your review and signature before clinical use.

Dictation

If you dictate, the speech-to-text step is performed by your own browser's speech service (for example, the service built into Chrome), under that provider's terms — which is one more reason the product asks you to dictate de-identified wording only. If you prefer that nothing leave your keyboard, type instead: dictation is always optional.

What we do collect — about you, not your patients

• Your account: your email address, your subscription tier and status, and your sign-in sessions.
• Usage counts: how many letters your account generated in a billing period — a number, not the letters — so allowances and the usage meter work.
• Billing: handled by Stripe. Your card number goes directly to Stripe and never touches our servers; we see the subscription status and receipts, not your card.
• Style samples, if you provide them: if you share example letters to teach Presto your writing style, they are processed to build your style profile. Share only de-identified examples.
• Support email: if you write to us, we keep the correspondence so we can help you.
• Settings on your device: your preferences, signature block, and drafts are stored locally in your own browser, not on our servers.

Who processes data for us

We keep the list short, and each provider only sees what its job requires:

• Anthropic — the AI that writes the letters. Your shorthand and the generated letter pass through their API to produce your document. Under the commercial terms we use, this data is not used to train their models.
• Cloudflare — hosts this website, the Presto app, and the server that relays generation requests.
• Stripe — payments, trials, and subscriptions.
• Email providers — transactional email (receipts, account messages) and our support mailbox.

This website

The marketing site you're reading sets no cookies and runs no analytics or ad trackers. If you click "Start free trial," you go to Stripe's checkout, which operates under Stripe's own privacy policy.

How long we keep things

• Clinical content (shorthand, letters): not stored after your request completes — there is nothing to retain.
• Account and billing records: for as long as you have an account, and afterwards only as long as tax and business-record laws require.
• Support correspondence: kept while it's useful for helping you, then deleted in the ordinary course.

Security

Everything travels over encrypted connections (HTTPS). Secrets and keys are stored in managed, encrypted infrastructure. And the deepest protection is architectural: a system that doesn't hold patient records can't lose them.

Your choices and rights

You can ask us at any time what we hold about you, ask us to correct it, or ask us to delete your account and its records (billing records we're legally required to keep excepted). Email support@prestoscribe.com — it's read by the physician who built the product, and Canadian privacy law (PIPEDA) backs these rights.

Changes

If this policy changes in any meaningful way, we'll say so plainly — on this page and, for material changes, by email to account holders. The date at the top always tells you the current version.

Contact

Presto is operated by Barnufa Innovations Inc. of Mississauga, Ontario, Canada — founded and run by Dr. W. Ahmad Thiryayi. Questions about privacy — or anything — go to support@prestoscribe.com.