PLABPro — Privacy Policy

Effective Date: 2 February 2026

The London Institute of Business and Technology (“LIBT”, “we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use the PLABPro platform (the “Platform”). This policy is issued in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

The data controller for the purposes of applicable data protection legislation is the London Institute of Business and Technology. For all data protection enquiries, please contact us at support@plabpro.ai.

2. Data We Collect

2.1 Account Information

When you create an account, we collect your name, email address, and authentication credentials. If you make a purchase, our payment processor (Stripe) collects your payment information. We do not store your full credit or debit card details on our servers.

2.2 Session and Usage Data

When you use the Platform, we collect:

Voice audio data transmitted during practice sessions for real-time processing. This audio is streamed to our voice processing provider and is not permanently stored by LIBT unless otherwise specified.
Session transcripts — the text record of your practice conversations.
Session metadata including timestamps, duration, scenario selections, and performance feedback.
Usage patterns such as pages visited, features used, and frequency of access.

2.3 Technical Data

We automatically collect your IP address, browser type and version, operating system, device information, and cookies and similar tracking technologies as described in Section 9 below.

3. How We Use Your Data

We use your personal data to:

Provide, maintain, and improve the PLABPro platform.
Process your transactions and manage your credit balance.
Generate and deliver AI-powered practice sessions.
Provide session transcripts and performance feedback.
Communicate with you about your account, service updates, and promotional offers (where you have opted in).
Detect and prevent fraud, abuse, and security incidents.
Comply with our legal obligations.
Analyse aggregate usage patterns to improve the Platform (using anonymised data where possible).

4. Legal Basis for Processing

We process your personal data on the following legal bases under the UK GDPR:

Contractual necessity (Article 6(1)(b)) — for providing the Platform and processing your purchases.
Legitimate interests (Article 6(1)(f)) — for improving the Platform, ensuring security, and fraud prevention.
Consent (Article 6(1)(a)) — for marketing communications and non-essential cookies.
Legal obligation (Article 6(1)(c)) — for tax, accounting, and regulatory compliance.

5. Voice and Audio Data

IMPORTANT: Your voice data is processed in real-time and is not permanently stored by LIBT.

During practice sessions, your voice audio is streamed in real-time to our voice processing provider (Deepgram) for speech-to-text conversion. The audio stream is processed in real-time and discarded after transcription. Text transcripts of your sessions are stored on our servers and associated with your account for the purpose of providing session history and performance tracking. You may request deletion of your session transcripts at any time by contacting us at support@plabpro.ai.

Deepgram's processing of audio data is governed by their own privacy policy, which we encourage you to review.

6. Data Sharing and Third Parties

We share your data with the following categories of third-party service providers, each of which processes data on our behalf and subject to appropriate contractual safeguards:

Deepgram — voice processing and transcription (based in the United States).
Anthropic — AI language model provider (based in the United States).
Stripe — payment processing.
Hosting and infrastructure providers.

Where your data is transferred outside the United Kingdom, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the Information Commissioner's Office (ICO), or the recipient's participation in an adequacy framework.

We do not sell your personal data to third parties. We may disclose your data if required to do so by law, regulation, legal process, or governmental request.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Platform services to you:

Account information is retained for the duration of your account and for up to twenty-four (24) months after account closure.
Session transcripts are retained for up to twelve (12) months from the date of the session, unless you request earlier deletion.
Payment records are retained for up to seven (7) years as required by UK tax and accounting regulations.
Technical and usage data is retained for up to twelve (12) months in identifiable form and may be retained in anonymised form indefinitely for analytical purposes.

8. Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights in relation to your personal data:

Right of access — to obtain a copy of the data we hold about you.
Right to rectification — to correct inaccurate data.
Right to erasure — to request deletion of your data, subject to legal retention requirements.
Right to restrict processing.
Right to data portability — to receive your data in a structured, machine-readable format.
Right to object — to processing based on legitimate interests.
Right to withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at support@plabpro.ai. We will respond to your request within one (1) month, as required by law.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Cookies and Tracking Technologies

We use essential cookies that are strictly necessary for the Platform to function, including session management and authentication. We may also use analytics cookies to understand how users interact with the Platform, which we will only set with your consent. You can manage your cookie preferences through the cookie banner displayed when you first visit the Platform, or through your browser settings.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit (TLS/SSL) and at rest;
Secure authentication mechanisms;
Regular security reviews and updates; and
Access controls limiting data access to authorised personnel.

While we take reasonable steps to protect your data, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

11. Children's Privacy

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 18, we will take steps to delete such data promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to you via email or a prominent notice on the Platform. The “Effective Date” at the top of this policy indicates when it was last revised.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at:

London Institute of Business and Technology
Email: support@plabpro.ai
Website: plabpro.ai