Logo

Privacy Policy

Gravitas LMS — Privacy Policy

Last updated: August 8, 2026

  1. Overview This Privacy Policy describes how Gravitas LLC ("Gravitas," "we," "us") collects, uses, and protects information through the Gravitas Learning Management System (the "Platform"). By using the Platform, you agree to the practices described here.

  2. Information We Collect

Account and registration information: Name, email address, employer/organization name, job role, and login credentials.

Course activity and completion data: Courses accessed, progress, quiz responses and scores, completion dates, and certificates issued. This data is retained to satisfy compliance record-keeping purposes described in your Course content (e.g., audit-ready documentation for HIPAA, OSHA, and similar training).

Uploaded documents: Where a Course requires you to upload documentation of external completion (for example, a certificate from a third-party training provider such as CMS's Medicare Learning Network), we store that uploaded file as part of your compliance record.

Communications: Questions or messages submitted through a Course's interactive Q&A or helpline feature, and our responses, which we retain as required by applicable training regulations (for example, California's requirement to retain interactive training Q&A records for at least two years).

Payment information: Billing details are processed through our third-party payment processor. Gravitas does not directly store full payment card numbers.

Technical data: IP address, browser type, device information, and usage data collected automatically through standard web analytics.

  1. How We Use Information We use collected information to: provide and administer Course access; track and document training completion for your compliance records; respond to interactive Q&A submissions as required by applicable law; communicate with you about your account, billing, or Course updates; improve and maintain the Platform; and comply with legal, regulatory, and audit-related obligations.

  2. Sharing Your Information

With your employer/organization: If you're taking Courses through an employer-purchased package, your completion records, certificates, and progress are visible to your employer's designated administrator, since documenting your compliance is the purpose of the Platform.

With service providers: We share information with third parties who help operate the Platform, such as hosting providers and payment processors, under confidentiality obligations.

Legal requirements: We may disclose information if required by law, regulation, subpoena, or governmental request, or to protect the rights, safety, or property of Gravitas or others.

We do not sell your personal information to third parties.

  1. Data Retention We retain training completion records, certificates, and related compliance documentation for as long as necessary to satisfy the recommended or required retention periods of the applicable regulation (for example, OSHA training records, HIPAA-related documentation, or state-specific harassment training record requirements), and in no case longer than necessary for that purpose unless you or your employer request otherwise, subject to applicable law.

  2. Data Security We use reasonable administrative, technical, and physical safeguards designed to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

  3. Your Rights and Choices Depending on your location, you may have rights to access, correct, or request deletion of your personal information, subject to our legal obligation to retain certain compliance records. To make a request, contact us at [privacy contact email]. Note that deleting certain training completion records may affect your or your employer's ability to demonstrate compliance with applicable law.

  4. Children's Privacy The Platform is not directed to individuals under 18, and we do not knowingly collect information from anyone under 18.

  5. Third-Party Links Some Courses link to third-party resources (for example, government training platforms like CMS's Medicare Learning Network). This Privacy Policy does not apply to those third-party sites, which have their own privacy practices.

  6. International Users The Platform is operated in the United States. If you access it from outside the United States, your information will be transferred to and processed in the United States.

  7. Changes to This Policy We may update this Privacy Policy from time to time. Material changes will be communicated via [email / platform notice]. Continued use of the Platform after changes take effect constitutes acceptance of the revised policy.

  8. Contact Us Questions about this Privacy Policy or your data can be directed to engage@withgravitas.com