Privacy Policy

LearnLayer provides a cloud-based learning management system (LMS) and related tools that enable customers to create, manage, and deliver training content, administer users, and track learning activity.

The entity responsible for the Platform is:

When we operate our public website, manage our own business relationships, and handle account administration and billing, we act as a controller of personal information.

When our business customers upload or process personal data about their own learners, employees, or end users through the Platform, we act as a processor (or service provider) on their behalf. In that case, the customer is the controller and is responsible for determining the purposes and means of processing. This Privacy Policy does not govern the practices of our customers; please refer to the privacy notice of the organization that provided you access to the Platform.

We collect the following categories of personal information:

You are not required to provide personal information, but some information is necessary to create an account, access the Platform, or receive support.

Where we act as a controller, we use personal information to:

• Provide, operate, maintain, and secure the Platform and our website.
• Create and administer accounts and authenticate users.
• Process transactions, manage subscriptions, and send billing-related communications.
• Respond to inquiries, provide customer support, and send service-related notices.
• Monitor, analyze, and improve the performance, features, and usability of the Platform.
• Detect, prevent, and address fraud, abuse, security incidents, and technical issues.
• Comply with legal obligations and enforce our agreements.
• Send marketing communications where permitted, subject to your right to opt out.

Where we act as a processor, we use personal data only to provide and support the Platform in accordance with our customer’s instructions and the applicable agreement.

Where the European Union General Data Protection Regulation (GDPR) or similar laws apply and we act as a controller, we rely on one or more of the following legal bases:

• Contract — to provide the Platform and perform our agreement with you.
• Legitimate interests — to operate, secure, and improve our business, where not overridden by your rights.
• Consent — for certain marketing and cookies, which you may withdraw at any time.
• Legal obligation — to comply with applicable laws and regulatory requirements.

We do not sell personal information. We may share personal information with:

• Service providers and subprocessors who perform services on our behalf, such as cloud hosting, analytics, payment processing, email delivery, and customer support, under appropriate confidentiality and data protection obligations.
• Our business customers , where you access the Platform through an organization that administers your account.
• Legal and safety recipients , when required to comply with law, respond to lawful requests, or protect the rights, property, or safety of LearnLayer, our users, or others.
• Business transfers , in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to this Privacy Policy.

LearnLayer is based in the United States, and we and our service providers may process personal information in the United States and other countries. Where we transfer personal data from the European Economic Area, the United Kingdom, or Switzerland, we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses or other lawful transfer mechanisms.

We retain personal information for as long as necessary to provide the Platform, fulfill the purposes described in this Privacy Policy, comply with our legal obligations, resolve disputes, and enforce our agreements. When personal data is no longer required, we will delete or anonymize it. Where we act as a processor, retention and deletion of customer data are governed by our agreement with the relevant customer.

We implement commercially reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, or alteration. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have rights regarding your personal information, including the right to access, correct, delete, or restrict processing, the right to data portability, and the right to object to certain processing. Where processing is based on consent, you may withdraw consent at any time without affecting prior processing.

To exercise your rights, contact us at privacy@learnlayer.com . We may need to verify your identity before responding. If your personal data is processed by an organization that provided you access to the Platform, please direct your request to that organization, and we will assist them as required.

If you are in the European Economic Area, the United Kingdom, or Switzerland, you also have the right to lodge a complaint with your local data protection authority.

Residents of certain U.S. states (such as California) may have additional rights, including the right to know, access, correct, and delete personal information, and to opt out of the “sale” or “sharing” of personal information and certain targeted advertising. We do not sell personal information. To exercise these rights, contact us using the details above. We will not discriminate against you for exercising your privacy rights.

We and our service providers use cookies and similar technologies to operate the Platform, remember your preferences, maintain sessions, and analyze usage. You can control cookies through your browser settings and, where applicable, through any cookie banner or preference tool we provide. Disabling some cookies may affect the functionality of the Platform.

The Platform is intended for use by organizations and their authorized users and is not directed to children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

The Platform may contain links to third-party websites or services that we do not operate. We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy notices.

We may update this Privacy Policy from time to time. If we make material changes, we will take commercially reasonable steps to provide notice (for example, by posting an updated version on this page and updating the effective date above). Your continued use of the Platform after the effective date constitutes acceptance of the updated Privacy Policy.

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us: