Privacy Policy — Superable Learning

1. Who are we?

We are Superable Learning (SuperableLearning.com), an accessibility-first multi-tenant learning management system. If you have any privacy-related questions or need to exercise your data rights, you can reach out directly via your organization's support contact or our platform support links in the documentation.

2. What data do we collect?

We collect information necessary to provide secure learning portals, course package rendering, and learner progress tracking. This includes:

Contact Information: Names, email addresses, and account credentials (such as encrypted password hashes).
Progress & Telemetry Data: Course completions, quiz responses, time spent per module, and user engagement logs.
Survey Responses: Answers to any pre-course or post-course feedback survey your organization has chosen to attach to a course. See Section 5 below — what a survey collects, and whether any of it is personally identifiable, is entirely up to your organization.
Technical Logs: IP addresses, browser types, and standard access details required to maintain platform security and performance.
Payment Information: Superable Learning does not collect or process payments, and never receives card details. See Section 4 for how plan billing works and for organizations that sell their own courses.

3. Why do we collect this data?

To deliver training: To manage course enrollments, track learner certifications, and maintain progress indicators.
To optimize accessibility: To ensure that standard screens, custom components, and players load correctly for screen readers and assistive devices.
To enforce security: To maintain strict isolated multi-tenant database access (ensuring user records are never commingled between organizations).

4. Third-Party Services

Billing for paid plans is currently handled directly and manually rather than through an automated third-party checkout — no payment processor receives your account data as part of using the platform today. If we introduce an automated payment processor in the future, it will be named here along with a link to its own privacy policy.

An organization using Superable Learning may sell access to its own courses by linking learners to a payment page on its own website. That payment happens entirely on the organization's site, under its own privacy policy and payment provider; Superable Learning does not receive the payment details, and only sees the access code the learner enters afterwards.

Emails the platform sends (such as welcome messages, password resets, set-password links, and messages submitted through the Contact Us form) are delivered through Resend (opens in a new tab), an email delivery service, which receives the recipient's email address and the message content in order to send it.

We do not sell or monetize personal data to third parties.

5. Survey & Feedback Data

Organizations using Superable Learning can attach optional feedback surveys to a course, shown to learners before starting (pre-course) and/or after finishing (post-course). This data is handled differently from other account data in a few important ways:

Your organization controls the questions: We do not design, review, or restrict what a survey asks. If your organization's survey asks for a name, job title, or other personal information in an open-text answer, that is your organization's choice and responsibility, not ours — design surveys accordingly if you intend responses to stay anonymous.
Retention is indefinite until deleted: Survey responses are kept in your organization's isolated database until an administrator of that organization deletes them (per-response or the entire survey) from the Admin Panel's Surveys tab. We do not automatically expire or purge survey data.
Deletion requests go through your organization: For surveys, your organization (the tenant operating the course) is the data controller, and Superable Learning is the data processor storing it on their behalf. If you completed a survey and want your response deleted, contact the organization that ran the course — they can remove individual responses directly. If they're unable to, they can request removal from Superable Learning platform support on your behalf.
Export: Organizations can export their own survey results as CSV at any time; we don't independently share, sell, or analyze this data.

6. Connecting AI Apps (Claude and ChatGPT)

Administrators and editors can connect Superable Learning to an AI app such as Claude or ChatGPT, so the AI can build, check and publish courses on their organization's site. You start the connection from inside the AI app and sign in to Superable Learning yourself; you never share your password with the AI app, and you can choose not to connect at any time.

What we store about a connection: the name the AI app gives itself, the organization and the person who connected it (name and email address), when it was connected and last used, and, if it was disconnected, when and why. When an AI app first registers with us, we also store the web address it returns you to after sign-in and the IP address it registered from.
Sign-in tokens: the AI app receives a token that expires after one hour and a renewal token that expires after 60 days without use. We store only a one-way fingerprint (hash) of each token, never the token itself, and delete expired tokens about a day after they expire.
What the AI app sends us: only what it passes to our tools: course titles, course content and images to validate or publish, and requests to list or read your organization's courses. We do not receive your chat history or anything else from your conversations with the AI app. Published content is stored like any other course your organization uploads.
Images from web addresses: if the AI app asks us to add an image from a public web address, our server downloads that image directly, so the site hosting it sees a request from our server rather than from you.
What the AI app's provider does: your conversations with Claude or ChatGPT, including anything our tools return to the AI, are handled under that provider's own privacy policy (Anthropic (opens in a new tab) or OpenAI (opens in a new tab)), not this one.
Your controls: an administrator can disconnect any of the organization's connections from the Admin Panel's AI Apps & API Keys tab, which stops access immediately and revokes both tokens. Removing the connector in the AI app's own settings removes it on that app's side only, so use the Admin Panel to be sure it can no longer publish. We keep the record that a connection existed, and when it ended, for security auditing; to have these records deleted, contact Superable Learning platform support.

7. Your Rights

Depending on your location, you may have rights under the GDPR, CCPA, or regional compliance frameworks, including:

Right to Access: Requesting a copy of your personal data stored in our system.
Right to Rectification: Updating inaccurate account or profile information.
Right to Erasure: Requesting the deletion of your account records.
Right to Data Portability: Transferring progress and enrollment histories.

To exercise these rights, please contact your organization's LMS Administrator or Superable Learning platform support.

8. Updates to this Policy

We may update this policy periodically to reflect platform upgrades or operational adjustments. Any changes will be posted on this page, and the "Last Updated" date will be revised accordingly.