Privacy Policy

Scope

This Privacy Policy applies to personal information collected:

• •Through provisant.com and related marketing pages.
• •Through scheduling, inquiry, and contact workflows.
• •Through business-development, sales, account-management, and customer-support communications.
• •Through hosted learning-platform services operated by or for Provisant customers.
• •Through certain integrations and service relationships and potential CRM or workflow integrations, where applicable.

This Privacy Policy does not override any separate master services agreement, statement of work, subscription agreement, data processing agreement, or other signed contract between Provisant and a customer. Where a separate signed agreement addresses privacy, security, or data handling for customer platform data, that agreement controls to the extent of any conflict.

Controller and processor roles

Marketing site and direct business interactions

For data collected through provisant.com, bookings, direct emails, intake forms, demos, newsletters, and other pre-sales or relationship-management activities, Provisant generally acts as the data controller because it decides what information to collect and how to use it for its own business purposes.

Hosted platform and learner data

For personal information Provisant processes on behalf of customer organizations in connection with hosted training portals, learner administration, course delivery, reporting, analytics, SSO, and related support, Provisant generally acts as a data processor or service provider. In that role, Provisant processes data under the instructions of the applicable customer, which is typically the data controller for that information.

If a learner, employee, contractor, or other end user has questions about personal information processed through a customer-sponsored training portal, that person should first contact the sponsoring customer organization. Provisant will assist customers with appropriate requests when required by contract or law.

Information collected

Depending on how an individual interacts with Provisant, the following categories of information may be collected:

• •Contact and professional information, such as name, business email address, phone number, employer, job title, department, and other information submitted through forms, scheduling tools, or direct communications.
• •Inquiry and transaction information, such as meeting requests, project details, service interests, procurement details, communications history, and customer-support records.
• •Device and usage information, such as IP address, browser type, device identifiers, operating system, referring URLs, pages viewed, session activity, approximate geolocation derived from IP, and similar website or platform usage data.
• •Cookie and similar technology data, such as analytics information, session identifiers, and tool-specific data used to support scheduling, site functionality, and performance measurement.
• •Platform and learner data, where Provisant hosts or administers a customer environment, such as learner names, usernames, business contact details, course enrollment details, completion records, assessment results, certificates, training progress, login events, and other information made available by the customer or generated through use of the platform.
• •Integration data, such as information exchanged with authorized integrations enabled by a customer or by Provisant for business operations.

Provisant does not ask consumers to provide sensitive personal information unless it is reasonably necessary for a specific business purpose. Users should not submit Social Security numbers, financial-account numbers, health information, or other highly sensitive data through the marketing website unless specifically requested through an appropriate secure workflow.

Custom eLearning development data

In connection with custom eLearning development, instructional-design, accessibility, simulation, modernization, or related professional services, Provisant may receive or access customer-provided materials and information needed to scope, design, build, test, maintain, or support a project. These materials may include internal policies, operating procedures, workflows, screenshots, recordings, product information, brand assets, regulated-process documentation, and other business information that may contain personal information or confidential business information.

When Provisant receives such materials for its own pre-sales, project-administration, or business-operations purposes, Provisant may act as a controller for the limited contact, communications, and proposal-related information involved. When Provisant receives or accesses customer materials, learner information, or related data in order to provide hosted platform services or custom development on behalf of a customer, Provisant generally acts as a processor or service provider and processes that information under the customer's instructions and applicable contract terms.

Provisant uses commercially reasonable safeguards and access controls designed to limit use of customer-provided materials to authorized personnel, contractors, and service providers with a legitimate business need to know, subject to applicable confidentiality, security, and contractual obligations. This Privacy Policy addresses personal information; confidentiality, trade-secret protection, deliverable ownership, and more detailed project-specific data obligations may also be governed by separate signed agreements with customers.

Sources of information

Personal information may be collected from the following sources:

• •Directly from individuals, such as when someone books a meeting, fills out a form, requests a proposal, signs up for updates, contacts support, or otherwise communicates with Provisant.
• •Automatically from browsers, devices, and applications through cookies, logs, analytics tools, and similar technologies.
• •From customers and their authorized users when they use Provisant's hosted learning platform.
• •From third-party services and integrations, such as CRM systems, analytics providers, SSO providers, authoring or interoperability tools and standards where relevant, or other business tools used in connection with Provisant's services.
• •From publicly available or commercially available business-information sources where permitted by law.

How information is used

Provisant may use personal information for the following purposes:

• •To operate, maintain, secure, and improve provisant.com and Provisant's services.
• •To respond to inquiries, schedule meetings, provide demos, deliver proposals, negotiate contracts, and manage customer relationships.
• •To provide hosted learning-platform services, administer accounts, deliver training content, authenticate users, provide reporting, and support customer-requested functionality.
• •To communicate about services, updates, support issues, and other operational matters.
• •To analyze usage, measure engagement, troubleshoot errors, monitor performance, and improve user experience.
• •To detect, investigate, prevent, and address fraud, unauthorized access, abuse, security incidents, and other unlawful or harmful activity.
• •To comply with legal obligations, enforce agreements, protect rights and property, and maintain business records.
• •To send marketing or promotional communications where permitted by law, subject to available opt-out rights.

Provisant may also aggregate or de-identify information and use it for lawful business purposes, such as service improvement, benchmarking, analytics, and product planning, provided the information is not used to reidentify a particular individual.

Legal bases where applicable

Where applicable data-protection laws require a legal basis for processing, Provisant may rely on one or more of the following: consent, performance of a contract, compliance with legal obligations, and legitimate interests such as operating the business, securing systems, improving services, and communicating with business contacts. When Provisant acts solely as a processor on behalf of a customer, the relevant customer is generally responsible for establishing the legal basis for the underlying processing.

Cookies and similar technologies

Provisant may use cookies, pixels, local storage, SDKs, and similar technologies on provisant.com and related digital properties for purposes such as:

• •Keeping the website operational.
• •Enabling scheduling and form functionality.
• •Understanding site traffic and user engagement.
• •Remembering preferences and improving performance.

At present, cookies are used primarily for basic analytics, website functionality, and scheduling workflows. Advertising or retargeting technologies may be added in the future, and if Provisant materially changes its cookie practices, Provisant may update this Privacy Policy and, where required, provide additional notice or consent mechanisms.

Most browsers allow users to manage cookies through browser settings. Blocking certain cookies may affect site functionality.

Disclosure of information

Provisant may disclose personal information to the following categories of recipients, as appropriate:

• •Service providers and subprocessors that help operate the website, business systems, customer communications, hosting environments, analytics, forms, scheduling, support, integrations, and platform functionality.
• •Customers and their authorized users in connection with the hosted learning platform and customer-sponsored training programs.
• •Professional advisors, such as attorneys, accountants, auditors, insurers, and similar advisors bound by confidentiality or professional obligations.
• •Business counterparties involved in transactions, reorganizations, financing, due diligence, mergers, acquisitions, or asset sales.
• •Government authorities, regulators, law enforcement, courts, and other third parties where required by law or reasonably necessary to protect rights, safety, property, systems, or users.

Known tools and categories currently in scope may include hosting and infrastructure providers, analytics providers, potential business-system integrations, and project-related authoring or interoperability tools and standards, depending on the services being used. References to third-party tools or standards in this Privacy Policy describe technical or service contexts only and do not alter the separate privacy notices, license terms, or practices of those third parties. Provisant may use additional providers over time. Requests for information about current subprocessors may be directed to support@provisant.com.

Provisant does not sell personal information in the ordinary meaning of that term. Provisant also does not share personal information for cross-context behavioral advertising through the marketing site at this time, although future advertising or retargeting practices could change and would be addressed through updated disclosures where required.

Data retention

Provisant retains personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide services, maintain business and legal records, resolve disputes, enforce agreements, and comply with applicable law.

Retention periods vary depending on the type of information, the context in which it was collected, contractual requirements, customer instructions, legal obligations, and operational needs. When Provisant processes learner or platform data on behalf of a customer, Provisant generally retains and deletes that data in accordance with the applicable customer agreement, customer instructions, and legal requirements.

Data security

Provisant uses administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. Those safeguards may include access controls, authentication measures, secure hosting practices, role-based access, logging, and other reasonable security measures appropriate to the nature of the data and services provided.

No method of transmission over the Internet or electronic storage is completely secure, and no security measure can guarantee absolute security. For that reason, this Privacy Policy does not create a guarantee that systems will be immune from all security incidents.

Individual rights and choices

Subject to applicable law and the context of processing, individuals may have rights to request access to, correction of, deletion of, or restriction of certain personal information, or to object to certain processing or withdraw consent where consent is the basis for processing.

Requests relating to information Provisant controls directly, such as marketing-site inquiry data or direct business-contact information, may be submitted to support@provisant.com. Requests relating to learner or employee data processed through a customer-sponsored platform should usually be directed first to the relevant customer organization, because that customer typically controls the data and determines the response.

Marketing emails may include unsubscribe functionality, and individuals may opt out of non-essential promotional communications at any time. Provisant may still send transactional or service-related communications where necessary.

Children's privacy and education-related data

Provisant's services are designed primarily for business, enterprise, and organizational use, not for direct consumer use by children. Provisant does not currently target K-12 programs. Where Provisant may in the future support K-12, school, or minor-related training contexts, Provisant expects the applicable customer or educational institution to define the authorized use case and legal basis, and Provisant will address applicable requirements, including FERPA or COPPA considerations where relevant to the specific engagement.

If Provisant learns that personal information has been collected from a child in a manner inconsistent with applicable law, Provisant will take appropriate steps to delete or remediate that information as required.

International data transfers

Provisant is based in the United States and may process or store information in the United States or other jurisdictions where Provisant, its customers, or its service providers operate. As a result, personal information may be transferred to and processed in countries that may not provide the same level of legal protection as the country where an individual resides.

Where required by applicable law, Provisant will use appropriate measures to support lawful cross-border transfers. When Provisant acts as a processor for customer platform data, transfer mechanisms may also be governed by the applicable customer agreement.

External links and third-party services

The website and services may contain links to third-party websites, platforms, or services, or may interoperate with third-party tools. Provisant is not responsible for the privacy, security, or data-handling practices of third parties except as required by law or contract. Individuals should review the privacy notices of any third-party services they use.

Changes to this Privacy Policy

Provisant may update this Privacy Policy from time to time to reflect changes in services, technologies, legal requirements, or business practices. When changes are made, Provisant will post the updated Privacy Policy on the relevant website and revise the Effective Date above. For material changes, Provisant may provide additional notice where appropriate or required by law.

Contact information

Questions, requests, or concerns regarding this Privacy Policy or Provisant's privacy practices may be directed to: