Privacy Policy

Who we are

Plasmo is an AI-powered past-paper marking tool for UK A-Level and GCSE students, and US SAT/ACT/AP students. We are based in the United Kingdom.

What data we collect

• Email address, name and profile picture — collected from Google or Microsoft when you sign in. We do not offer email/password sign-in.
• Usage counts — we count how many marks you use each day to enforce free-tier limits.
• Subscription status — managed via Stripe. We store only your subscription status and renewal date, not card details.
• Your answers and AI marking results — when you submit an answer to be marked, we store the answer text, the AI's feedback, and your score against your account, so your marking history and predicted grade can be shown back to you later. Answer images are sent to our AI for marking and are not retained separately after processing.
• Analytics events — page views and feature interactions are tracked via PostHog to improve the product. PostHog is configured to store this in your browser's local storage rather than cookies.

How we use your data

• To provide and personalise the Plasmo service, including marking your answers and predicting your grade
• To process payments and manage your subscription
• To measure and improve product features

Leaderboard visibility

Plasmo has a public leaderboard, visible to anyone who visits the leaderboard page — including people who aren't signed in — that ranks accounts by total marks correct. Your display name (from your Google/Microsoft account), your marks correct, average mark %, and how many questions you've answered are visible there. Your individual answers, AI feedback, and email address are never shown to anyone else.

Third parties

• Stripe — payment processing. Stripe handles all card data and is PCI-DSS compliant.
• Supabase — database hosting.
• Anthropic — AI marking. Your answers and questions are processed under Anthropic's API terms.
• Google / Microsoft — sign-in (OAuth). We only receive your name, email and profile picture.
• PostHog — product analytics.

Under-18s and parents/guardians

Many Plasmo users are under 18. We do not knowingly collect more data than described above, and we do not sell data or use it for advertising. If you're a parent or guardian and want to review, export, or delete a child's data, contact us using the details below and we'll help directly — no need to go through the account holder.

Your rights

Under UK GDPR you have the right to access, correct, or delete the data we hold about you. To exercise these rights, email us and we will respond within 30 days.

Data retention

We retain your account data, including marking history, for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required by law to keep it.

Cookies

We use cookies strictly necessary for authentication (sign-in state) and session management. Our analytics (PostHog) is configured to use your browser's local storage instead of cookies. No advertising or third-party tracking cookies are set by Plasmo.

Contact

Questions about this policy, or a data request from a parent/guardian? Contact us at support@autolearn.uk.