Autoplo is an AI-powered marketing dashboard for UK service businesses. This policy explains what personal data we collect, why we collect it, how it is stored, and your rights under UK GDPR.
Data controller: Jordan Taylor John McLaughlin (trading as Autoplo). Contact: [email protected].
When you create an account we collect your email address, full name, and business name. While using the app we store the data you provide: booking records, client contacts, uploaded media, social account connections, and any content you create or approve. We also log your usage of AI features for billing and rate-limiting purposes.
We process your personal data on the following bases under UK GDPR:
To deliver its features, Autoplo shares data with the following sub-processors only to the extent necessary:
We do not sell your data to any third party.
Zernio is based in Spain and operates within the EU/EEA — data transfers are lawful under UK GDPR's adequacy framework. Anthropic is based in the United States. When you use the Plo AI assistant, your message content is transmitted to Anthropic's servers in the USA under Standard Contractual Clauses as an appropriate safeguard. No other international transfers take place; all other data remains on UK-based servers.
Your data is stored on servers located in the United Kingdom. Passwords are hashed using bcrypt and never stored in plain text. OAuth tokens are encrypted at rest using AES-256. Access is restricted to you and authorised administrators. We use HTTPS for all data in transit.
We use first-party cookies and a self-hosted analytics system. Full analytics tracking only begins after you accept the consent banner. We always collect a minimal amount of technical data (device type, anonymised visitor count) for service integrity. After consent, we additionally collect:
We do not collect keystroke or form-input values (we record only that a field was focused, never what was typed), and we use no third-party analytics providers — everything is hosted on our UK servers.
You can withdraw consent at any time by clearing your browser cookies for autoplo.com.
Data retention. Page-level analytics is automatically deleted after 12 months. Raw IP addresses are anonymised after 30 days; only a salted hash is retained for unique-visitor counting thereafter. Account data is deleted immediately and permanently when you delete your account.
Under UK GDPR you have the right to access, correct, port, restrict, or erase your personal data. You may export a full copy of your data or delete your account at any time from Account Settings. For other rights requests, or if you have a complaint about how we handle your data, contact us at [email protected]. If you are not satisfied with our response you have the right to lodge a complaint with the Information Commissioner's Office.
Autoplo is registered with the Information Commissioner's Office (ICO) under UK GDPR, registration reference ZC133387. Registration expires 25 April 2027.
Autoplo is a trading name of Jordan Taylor John McLaughlin (sole trader).
Last updated: April 2026.