Privacy Policy

1. Introduction

Vig Solutions LLC, operating as AllureLMS ("we", "our", or "us"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

This policy applies to our unified ecosystem of services:

• allurelms.com - Our main AI-native learning management system
• connect.allurelms.com - Our SCORM API and integration service
• trainingos.allurelms.com - Our training content authoring platform

By using any of these services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Personal Information

We collect information you provide directly to us, including:

• Name and email address
• Username and password
• Profile information (avatar, bio, organization details)
• Payment information (processed securely through Stripe)
• Content you upload (SCORM packages, videos, PDFs, learning materials)

OAuth & Third-Party Authentication Data

When you authenticate using third-party providers like Google, we receive:

• Your name and email address from the OAuth provider
• Profile picture (if available and authorized)
• OAuth tokens for authentication purposes only

We do not access your third-party account content beyond what is necessary for authentication.

Usage Information

We automatically collect certain information about your device and how you interact with our services:

• Log data (IP address, browser type, pages visited)
• Device information (device type, operating system)
• Analytics data (page views, time spent, features used)
• SCORM tracking data (course progress, completion status, quiz scores)
• Cookies and similar tracking technologies

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process your transactions and send related information
• Enable single sign-on across our ecosystem (allurelms.com, connect.allurelms.com, trainingos)
• Track and report learning progress via SCORM standards
• Send you technical notices, updates, and support messages
• Respond to your comments and questions
• Monitor and analyze trends, usage, and activities
• Detect, prevent, and address technical issues and security threats
• Personalize your learning experience using AI-powered recommendations

4. Cross-Service Data Sharing

Our services (allurelms.com, connect.allurelms.com, and trainingos) are interconnected to provide a seamless learning experience. Data sharing between these services includes:

• Authentication data: Your login credentials work across all services via OAuth
• Profile information: Your name, email, and preferences sync across platforms
• Learning progress: Course completion and SCORM data flows between the LMS and Connect API
• Content metadata: Information about courses and training materials you create or access

This integration enables features like single sign-on, unified progress tracking, and consistent user experience across our platform.

5. OAuth & Third-Party Authentication

We offer authentication through third-party OAuth providers (such as Google) for your convenience. When you use these services:

• We only request the minimum permissions necessary for authentication (email and profile information)
• OAuth tokens are stored securely and used only for maintaining your authenticated session
• You can disconnect third-party authentication at any time through your account settings
• We do not post to or access your third-party accounts beyond authentication

Your use of third-party OAuth providers is also subject to their respective privacy policies.

6. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following situations:

• Service Providers: With third-party vendors who perform services on our behalf (hosting, payment processing, analytics)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with any merger, sale of company assets, or acquisition
• With Your Consent: When you explicitly consent to sharing
• Within Our Ecosystem: Between allurelms.com, connect.allurelms.com, and trainingos as described above

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information. These include:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of data at rest
• Regular security audits and monitoring
• Access controls and authentication
• Secure payment processing through Stripe (PCI DSS compliant)
• OAuth token encryption and secure storage

However, no method of transmission over the Internet is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes. SCORM completion records may be retained longer for compliance and reporting purposes as required by your organization.

9. Your Rights

Depending on your location, you may have the following rights:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Data Portability: Request a copy of your data in a portable format
• Opt-out: Opt-out of marketing communications
• Withdraw Consent: Withdraw consent where we rely on consent

To exercise these rights, please contact us at info@allurelms.com.

10. Cookies & Tracking

We use cookies and similar tracking technologies to track activity on our services and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

We use the following types of cookies:

• Essential Cookies: Required for authentication and core functionality
• Analytics Cookies: Help us understand how you use our services
• Preference Cookies: Remember your settings and preferences
• Session Cookies: Maintain your authenticated session across our ecosystem

11. Third-Party Services

Our services may contain links to third-party websites and services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

Third-party services we use include:

• Stripe: Payment processing
• Google: OAuth authentication
• Cloudflare R2: Content storage and delivery
• Supabase: Database and authentication infrastructure
• Vercel: Hosting and analytics

12. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at info@allurelms.com.

13. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ.

By using our services, you consent to the transfer of your information to the United States and other countries where our service providers operate.

14. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.