Browser extension

Practicore Anywhere: Privacy Policy

Last updated: 5 August 2026

This policy covers the Practicore Anywhere browser extension. This extension handles no credentials.

What the extension does

Practicore Anywhere helps South African tax practitioners complete statutory filings. With the Practicore web app open and a client selected, it fills the client you have selected and your own standing practitioner details into the official statutory filing forms, only when you click to do so. It never touches passwords, never stores any credential, and never submits a form.

What data it handles

Resolved field values (client and practitioner details). When you have the Practicore web app open and select a client, the web app sends the extension the values to fill (for example the client's name, contact details, and reference numbers) and your own standing practitioner details. The web app, not the extension, is the authenticated party; the extension receives only these resolved values, never your Practicore session token, password, or login to Practicore itself. They are cached in the browser's in-memory session storage (chrome.storage.session), held only for the current browser session, cleared when the browser closes, and not written to disk.
Form-field mapping state. To improve which form field maps to which value, the extension keeps form-field mapping state in the browser's local storage (chrome.storage.local). This stays on your machine.
Anonymous learning signal (includes the page address). So that field suggestions get better, the extension tells your own Practicore API which kind of detail you picked for a given form field — and to identify that field it sends the address of the page you are on (site and path, without any query string) together with the field’s HTML id. It reads the same key back to order the list next time.
What it does not contain: any client value, any client or firm identity, your session token, and any part of the page’s content. What it does mean: the pages on which you use Practicore Anywhere are visible to the Practicore installation you are signed in to.
These signals are pooled across all firms on that installation: that is the point of them — a field that many practitioners fill with a VAT number is ranked as a VAT-number field for everyone. Because the signal carries no client value and no firm identity, one firm cannot learn anything about another from it. It goes only to your own Practicore installation, never to a third party, and it is best-effort: if it fails, the extension carries on regardless.

What the extension does not do

It does not submit forms for you. You always click the final button.
It does not touch password or login fields. The fill path detects and excludes them.
It does not store or fill any login credential.
It does not send your data to any third party. Client and practitioner values move only inside your own browser; the only requests the extension makes of its own accord go to your own Practicore API, and carry no client value — though they do carry the address of the page you used it on (see “Anonymous learning signal” above).
It does not sell or share any data.

Data residency

The client and practitioner values the extension handles stay inside your browser and your authenticated Practicore session. The extension adds no external storage, and the only data it transmits is the anonymous learning signal described above — the page address plus a field id, carrying no client value — which goes to your own Practicore installation and no third party. Where that installation is hosted decides where the signal rests; for the hosted service that is South Africa.

Permissions and why

storage — to cache the resolved client/practitioner values for the current session (in memory only, via chrome.storage.session), and to keep form-field mapping state on your machine (chrome.storage.local) so autofill improves over time. No credentials are stored.
scripting — to register the extension's own content script on a site you have explicitly enabled (via the toolbar button), so the fill can run on that site's form.
host access — none up front. The extension runs automatically only on your own Practicore app (to receive the selected client) and on localhost for development. On any other site it does nothing until you click the toolbar button, which asks Chrome for permission to run on that one site. It never requests access to all sites, and the only host it contacts is your own Practicore API.

Contact

Questions about this policy: support@practicore.co.za. Practicore is operated by Practicore Technologies (Pty) Ltd.