Legal

Privacy Policy

This Privacy Policy explains how Kprise ("we," "us," or "Kprise") collects, uses, and shares information when you use MyPass LMS (the "Service"). We respect your privacy and are committed to protecting personal data.

Last updated: November 1, 2025

1. Information We Collect

We collect information you provide directly (account details, billing information, content you upload), information collected automatically (usage data, device information, IP addresses), and information from third parties (when you sign in via SSO or integrate other tools).

2. How We Use Information

We use information to provide and improve the Service, process payments, communicate with you, ensure security, comply with legal obligations, and analyze platform performance. We do not sell personal data and do not use customer content to train shared AI models.

3. Customer Data

For learners and end users of customer instances, the customer (your employer, association, or institution) is the data controller. Kprise acts as a data processor on the customer's behalf. Inquiries from learners about personal data should be directed to the customer organization first.

4. Sharing and Disclosure

We share information with: (a) service providers (hosting, payment processing, email delivery) under data-protection agreements; (b) integrated systems you authorize (HRIS, AMS, CRM); (c) when required by law or to protect rights; and (d) in connection with corporate transactions, with appropriate notice. We never sell personal data.

5. Data Security

We implement administrative, technical, and physical safeguards including SOC 2 Type II controls, encryption in transit (TLS 1.2+) and at rest, role-based access controls, and audit logging. No system is 100% secure, but we work continuously to protect data.

6. Data Retention

Customer Data is retained for the duration of the subscription and 30 days after termination for export. Inactive accounts may be deleted after 24 months. Audit logs are retained for compliance purposes per the customer's configured retention policy.

7. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, port, or restrict processing of personal data. EU/UK residents have rights under GDPR; California residents have rights under CCPA. To exercise these rights, contact privacy@kprise.com.

8. International Transfers

Kprise operates globally; data may be transferred and processed in countries other than your own. We use Standard Contractual Clauses and other appropriate safeguards for international transfers, particularly between the EU/UK and the United States.

9. Cookies and Tracking

We use cookies and similar technologies to authenticate users, remember preferences, analyze usage, and improve the Service. You can manage cookie preferences in your browser. Essential cookies are required for the Service to function.

10. Children's Privacy

The Service is not directed to children under 13 (or under 16 in the EU). We do not knowingly collect personal information from children. If you believe a child has provided personal data, contact us immediately so we can delete it.

11. AI and Automated Processing

MyPass uses AI for course generation, grading assistance, proctoring, recommendations, translation, and learner support. Customer Data is sandboxed per workspace and not used to train shared AI models. Customers can disable AI features at the workspace level.

12. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or in-product notice. The "Last Updated" date at the top of this page indicates the most recent revision.

13. Contact

Privacy questions or requests? Email privacy@kprise.com or contact our Data Protection Officer via the Contact page.