Last updated: 21 June 2026
This policy explains what personal data Plot collects, why, and what rights you have. Plot is operated by Ermir Ademi, trading as Plot Tax ("we", "us"), who is the data controller. We are registered with the UK Information Commissioner's Office under registration number ZC173865. Questions: support@plottax.com, or by post to Bluebell Cottage, Bigsweir, Lower Valley Road, St Briavels, Lydney, GL15 6QQ.
Account details: your email address when you create an account.
The figures you enter: income, expenses, and tax inputs you type into the calculators and the earnings tracker.
Receipts and documents: if you attach a receipt or supporting document to an expense, the image or PDF file you upload (images are compressed on your device before upload).
Bank statements you import (CSV, Excel or PDF) are read in your browser, on your device — the file itself is not uploaded to us; only the entries you review and confirm are saved to your account.
HMRC connection: if you use Making Tax Digital features, the authorisation (OAuth) tokens that let Plot file to HMRC on your behalf, and your National Insurance number, which identifies your records to HMRC.
Fraud-prevention data: the device and connection information HMRC requires us to send with each submission (for example browser, screen and connection details).
Basic technical data needed to run the service, such as your browser type and approximate region.
To provide the calculators, deductions finders and earnings tracker, and to save your data to your account so it's there next time. This includes storing any receipts or documents you attach against the relevant expense.
If you use Making Tax Digital features, to submit your records to HMRC on your instruction, and to meet HMRC's fraud-prevention requirements.
To maintain, secure and improve the service. We do not use your figures for advertising and we never sell your data.
We process your data to perform our contract with you (providing the service you've asked for) and, where relevant, on the basis of your consent, which you can withdraw at any time.
We also rely on our legitimate interests in keeping the service secure and preventing abuse — including retaining a one-way hash of your National Insurance number to stop repeat use of our free first-quarter offer.
Your account and saved figures are stored in the United Kingdom, in Google Firebase (Cloud Firestore), in Google's London region. Google acts as our data processor under its own security and data-processing terms.
Any receipts or documents you attach to expenses are stored in Google Firebase Cloud Storage, also in Google's London (United Kingdom) region.
Some processing — for example the secure connection that files your data to HMRC — runs on Google Cloud servers in the United States. These transfers are covered by the UK Extension to the EU-US Data Privacy Framework (the "UK-US Data Bridge"): Google LLC is certified under the Data Privacy Framework, which the UK recognises as providing an adequate level of protection for your personal data.
Card payments are handled by Stripe, a PCI-compliant payment provider; we never see or store your full card details.
When you connect Plot to HMRC, the authorisation tokens that represent your HMRC sign-in are stored on our servers (in Firestore), encrypted and never exposed to your browser, and the connection uses anti-forgery (CSRF) protection.
As HMRC requires, we send fraud-prevention headers (device and connection information) with each call to HMRC. This information is used only to meet HMRC's fraud-prevention requirements and for no other purpose. You can disconnect Plot from HMRC at any time.
We share data only with the processors that run the service (such as Google Firebase, and Stripe for payments), with HMRC when you choose to submit your records to them, or where we're required to by law. We do not sell or rent your personal data to anyone.
Plot uses only essential storage needed to keep you signed in and to let the app work offline as an installable web app. We don't use advertising or tracking cookies.
Our first quarterly HMRC submission can be used once without a paid subscription. To stop the same person claiming this free quarter again by deleting and re-creating an account, we keep a one-way, salted hash of your National Insurance number. A hash cannot be reversed to reveal your number — it only lets us recognise that a given person has already used the free quarter, and it is used for nothing else.
We rely on our legitimate interest in preventing abuse of this free offer. Because recognising repeat use is the whole point, we retain this single hashed value even if you delete your account or ask us to erase your data. We do not store your actual National Insurance number for this purpose.
We keep your data while your account is active. You can delete your data or close your account at any time, and we'll remove it. Receipts or documents you attach are deleted when you remove them, or when you close your account.
One narrow exception: if you have used the free first-quarter HMRC submission, we retain the one-way salted hash of your National Insurance number described under "Free-trial abuse prevention", even after you delete your account, to prevent repeat use of the offer. This is the only data we keep after deletion.
Under UK GDPR you can ask to access, correct, delete, restrict or port your data, and object to processing. Where our use of your data relies on your consent, you can withdraw that consent at any time. To exercise any of these, contact us at support@plottax.com, or by post to Bluebell Cottage, Bigsweir, Lower Valley Road, St Briavels, Lydney, GL15 6QQ.
You can also export your records yourself at any time from the Account & data area, in CSV, Excel and PDF formats, so you can keep or move your data.
You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Your data is encrypted in transit and at rest, and protected by access controls. HMRC authorisation tokens and other secrets are held securely on our servers and are not exposed to your browser. No online service can be guaranteed 100% secure, but we take reasonable steps to protect your information.
Plot is not intended for use by anyone under 18.
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.