Privacy Policy

1. Data we collect

We collect only what the Platform needs to function:

• Account data: email address, password hash, email confirmation status, account timestamps
• Entitlement data: payment reference, payment status, access start and end dates
• Content you create: shortlists, application plans, notes, and documents you choose to upload
• Support data: messages you send to support
• Technical data: IP address, device and browser information, and security and error logs
• Guided Help usage: query counts and cost metering, retained to enforce fair-use limits

2. How we use your data and our lawful bases

Performance of a contract: creating your account, activating and maintaining your access, and providing paid features.

Legitimate interests: securing the Platform, preventing abuse and fraud, metering Guided Help usage, and improving the service.

Legal obligation: keeping payment and tax records.

Consent: optional communications, where you have opted in. You may withdraw consent at any time.

3. Payments

Payments are processed by our third-party payment provider. We do not receive or store your full card details. We store only the payment reference and status needed to prove your entitlement.

4. Documents you upload

Documents you upload are stored privately and are accessible only to your account. We do not send your documents to universities, and we do not use them for any purpose other than providing the document-organiser feature to you. You can delete them at any time.

5. Guided Help processing

Guided Help runs server-side. Your query is processed to generate an answer grounded in Platform data and approved sources. We do not use your queries to train third-party models, and we do not include your uploaded documents in Guided Help requests unless you explicitly ask for that in a future feature that says so.

6. Sharing

We share personal data only with processors that operate the service — hosting and database infrastructure, the payment provider, email delivery, and the model provider used for Guided Help — each under a data-processing agreement. We do not sell personal data, and we do not pass your details to universities or to education agents.

7. International transfers

Where a processor operates outside the United Kingdom, transfers are protected by adequacy regulations or by the International Data Transfer Agreement or an equivalent safeguard.

8. Retention

Account and content data are kept while your account exists and for a short wind-down period after deletion. Payment and entitlement records are kept for six years to meet accounting obligations. Security logs are kept for a limited period appropriate to their purpose.

9. Your rights

You have the right to access your data, to have inaccurate data corrected, to have data erased, to restrict or object to processing, and to receive your data in a portable form. Contact us to exercise any of these rights.

You can also complain to the Information Commissioner's Office. To reach us, email [email protected].

10. Security

Access to your data is protected by authentication and row-level authorisation rules, transport encryption, and least-privilege server-side access. Uploaded files are stored in private storage. No system is perfectly secure, and you should also protect your own credentials.

11. Children

The Platform is intended for users aged 16 and over. If you believe a younger child has created an account, contact us and we will remove it.