This policy explains how Plume, operated by M.E.A Technological Solutions, handles personal information. We take particular care with information about students, who may be minors.
1. Our roles
For teacher and administrator account information, we act as the controller. For the student and parent information your organization enters, we act as a processor on your organization's behalf: your organization decides what to collect and is responsible for any required parental consent.
2. Information we collect
- Account data: name, email, role, and organization details for teachers and administrators.
- Student and family data entered by your organization: student name, grade, subjects, learning notes, and parent or student contact numbers.
- Learning activity: homework, submissions, session notes, and progress.
- Messages: content exchanged over WhatsApp to deliver and receive homework.
- Technical data: log and usage information needed to run and secure the service.
3. How we use information
To provide the service: generating and delivering homework, recording progress, sending parent updates, processing billing, providing support, and keeping the service secure. We do not sell personal information, and we do not use student information for advertising.
4. Children's data
Students may be under 18, and some under 13. Plume processes their information only to deliver the educational service your organization provides. Your organization is responsible for obtaining verifiable parental consent where required, and Plume records consent and lets parents view their child's progress through a private link and withdraw consent at any time. We minimize the student data we hold and never use it for marketing.
5. Service providers (subprocessors)
We use a small set of providers to operate the service. They process data only to provide their service to us:
- Cloud database, authentication, and storage (Supabase).
- Application hosting (Vercel).
- Messaging delivery to students and parents (WhatsApp, provided by Meta Platforms).
- Email delivery, including homework sent and handed in by email (Resend).
- Payment processing and tax handling (Paddle.com, our merchant of record).
- The model provider used to generate homework, feedback, and related content, and to read handwritten work (Anthropic).
- Matching homework and teaching material to curriculum topics (Voyage AI).
- Error monitoring, so we can find and fix faults in the service (Sentry).
- Turning homework into PDF files for printing and sending (PDFShift).
6. Sharing
We share information only with the providers above, with your organization, and where required by law. We do not sell or rent personal information.
7. Retention
We keep information for as long as your organization uses the service and as needed for legal, billing, and security purposes. When an account closes, customer data is deleted after a reasonable export window.
8. Security
Data is isolated per organization at the database level, encrypted in transit, and access is restricted by role. No system is perfectly secure, but we work to protect your information and to limit who can access it.
9. Your rights
Depending on your location you may have rights to access, correct, or delete personal information, or to object to or restrict processing. Account holders can manage much of this in the app. Parents can view and request changes to their child's information and withdraw consent. To make a request, contact us at support@plumeai.net.
10. International transfers
Our providers may process data in countries other than yours. Where required, we rely on appropriate safeguards for those transfers.
11. Cookies and local storage
We use only the cookies needed to sign you in and keep the app working. The pricing page stores your region choice in your browser so we do not ask again. We do not use advertising cookies.
12. Changes
We may update this policy and will change the date above when we do.
13. Contact
Privacy questions: support@plumeai.net. M.E.A Technological Solutions.