Privacy Policy

Scope and our role

This Privacy Policy applies when you visit edaxu.com, request information, start a trial, communicate with us, or use an Edaxu portal. An organization that provides an Edaxu portal generally decides which users, profile fields, courses, and learning records are managed in that portal. For that information, the organization is the controller or business and Edaxu acts as its processor or service provider. The organization's own privacy notice may also apply.

Edaxu is responsible for information it uses for its own account administration, security, sales, marketing, and service-improvement purposes. This policy does not apply to third-party websites or services that have their own privacy notices.

Information we collect

Account and organization information

We collect names, email addresses, password hashes, organization names, job roles, expected learner counts, portal memberships, permissions, profile images, and account settings. Customers may configure additional profile fields, such as phone number, address, company, license details, or other program-specific information.

Learning and credential records

The service stores enrollments, course access dates, progress, time spent, resource and quiz attempts, answers, scores, grading feedback, completion status, SCORM runtime and diagnostic data, certificates, badges, renewal and revocation history, and related audit events.

Customer content and support

We process course materials, reusable resources, quizzes, SCORM packages, documents, videos, images, email templates, and other files customers upload. Support tickets may include descriptions, comments, diagnostic information, and attachments supplied by users or administrators.

Technical, security, and usage information

We collect device and browser information, IP address, user agent, authentication and cookie data, login successes and failures, timestamps, application events, security records, and audit logs. On the marketing site, PostHog is used when analytics is enabled to understand visits, feature interest, and trial conversion.

Communications and email delivery

We process sales and support communications, signup and invitation details, password-reset requests, email recipients, message content, and delivery events needed to send and troubleshoot service messages. Marketing messages include an unsubscribe path.

AI assistant information

If the AI assistant is enabled, Edaxu stores conversation titles, prompts, responses, role context, model and token usage, and the LMS information returned by permission-checked tools to answer a request. Recent conversation history, prompts, and relevant tool results are sent to the AI provider configured for the service. Authorized customer administrators may review stored transcripts and usage information. Users should not place sensitive personal information in an AI prompt unless it is necessary and authorized.

How we obtain information

We receive information directly from users and prospective customers, from the organization that administers a portal, from activity within the service, and from integrations or content a customer chooses to use. Customers are responsible for having an appropriate basis to provide learner and administrator information to Edaxu.

How we use information

We use personal information to create and administer accounts; authenticate users; provide course delivery, assessment, reporting, certificates, support, and AI features; customize and secure portals; send transactional messages; detect abuse; troubleshoot and improve the service; fulfill customer instructions and agreements; comply with law; and establish or defend legal claims. We use contact information for sales and product communications where permitted by law.

How we disclose information

Customer administrators and other users with appropriate permissions can access information within their portal, including user profiles, learning records, support activity, reports, and, when permitted, AI transcripts. Information may also be visible to a parent or connected portal when the customer enables sharing or delegated administration.

We disclose information to vendors that provide cloud hosting and storage, email delivery, analytics, security, support, and AI inference. Current service infrastructure includes Amazon Web Services; Edaxu also uses Mailgun for email delivery and PostHog for marketing-site product analytics. These providers process information for the services they perform for Edaxu.

We may also disclose information when directed by a customer, in connection with a corporate transaction, to protect rights and safety, or when required by law. Edaxu does not sell personal information or use it for cross-context behavioral advertising.

Cookies and similar technology

Edaxu uses an essential authentication cookie to keep users signed in and browser storage to remember portal presentation settings. The marketing site may use analytics identifiers when PostHog is enabled. Browser controls can block or remove cookies, although blocking essential storage may prevent login or other service features from working correctly.

Retention

We retain account, customer content, learning, credential, and support information for the customer relationship and afterward as directed by the customer or reasonably needed for contractual, security, backup, audit, legal, and compliance purposes. Credentials and audit history may need to remain available longer to support verification and compliance records. Login-attempt, email-delivery, and application logs are kept for a limited period based on security and operational needs.

AI conversation messages remain available until the conversation is deleted or the customer requests deletion, subject to backups and legal obligations. Content-free AI usage records may be kept after a conversation is deleted for billing, abuse prevention, and aggregate reporting. Retention can also be governed by a customer agreement or applicable law.

Security

Edaxu uses administrative, technical, and organizational measures intended to protect information, including access controls, permission-scoped administration, encryption in transit, encryption for production database and storage infrastructure, password hashing, security logging, and protected cloud storage. No system can guarantee absolute security, and users are responsible for protecting their credentials.

Your choices and privacy rights

Depending on where you live, you may have rights to request access, correction, deletion, or a copy of personal information, to object to or restrict certain processing, or to appeal a denied request. You can unsubscribe from marketing email using the link in the message.

If your account is provided by an employer, association, school, or other customer, send requests about portal profile and learning records to that organization first. Edaxu will assist the customer with verified requests as required by law and contract. We may need information to verify identity and authority before acting on a request.

Children

Edaxu is not directed to children under 13 and does not knowingly offer self-service accounts to them. A customer that uses Edaxu with minors is responsible for providing required notices, obtaining required consent or authorization, and configuring the service appropriately. Contact us if you believe information was collected from a child without appropriate authorization.

International processing

Edaxu and its providers primarily process information in the United States. If information is transferred from another country, Edaxu uses contractual and other safeguards required by applicable law.

Changes to this policy

We may update this policy as the service, vendors, or legal requirements change. We will post the revised policy with a new update date and provide additional notice when required.

Contact

For privacy questions, data requests, a data processing agreement, or vendor review, contact sales@edaxu.com. Please identify the organization or portal associated with your request.