LMSOne Privacy Policy

Information we process

We may process information supplied by institutions, administrators, instructors, and learners or generated through their use of LMSOne. Depending on the institution's configuration, this can include account and contact information, organization and course records, attendance, assignments, submissions, grades or progress, learning resources, billing records, support messages, uploaded files, audit events, and device, browser, IP-address, and usage information.

How information is used

We use information to authenticate users, provide and secure learning workflows, apply permissions, operate tenant workspaces, process requested communications, scan supported uploads, troubleshoot problems, maintain records and backups, prevent misuse, support customers, improve service performance, enforce our agreements, and meet applicable legal obligations.

Institutional responsibilities

The institution that provides LMSOne access controls the educational records and content it places in the service. Institutions are responsible for providing required notices, establishing a lawful basis for processing, assigning appropriate access, and deciding whether LMSOne is suitable for their legal, contractual, and policy obligations. Users should direct questions about institution-controlled educational records to that institution first.

Higher-education scope

LMSOne is designed, offered, documented, and supported for higher education. We do not prohibit an institution from configuring the service for K–12 activity, but K–12 use is outside the supported and warranted scope of the product. No compliance, security, accessibility, or other statement about LMSOne should be interpreted as a representation that the service is suitable for, certified for, or compliant with requirements specific to K–12 students or environments.

Service providers and disclosures

We do not sell customer data or personal information for money. We may use hosting, storage, networking, security, email, monitoring, backup, and other service providers to operate LMSOne. These providers may process information on our behalf. We may also preserve or disclose information when reasonably necessary to comply with law or legal process, enforce agreements, investigate abuse, or protect users, institutions, systems, or rights.

Security and retention

We use administrative and technical measures intended to protect information; no system can guarantee absolute security. Our current, code-verified controls are described on the LMSOne security page. We retain information for as long as reasonably needed to provide and secure the service, maintain required records, resolve disputes, enforce agreements, and meet legal obligations. Retention can also be governed by an institution's agreement and configuration.

Your choices

Requests to access, correct, export, or delete institution-controlled data should normally be submitted to the relevant institution. Other privacy questions and qualifying requests may be submitted through Wolfstone Media. We may retain limited records where lawfully required or reasonably necessary for security, audit, fraud prevention, billing, or dispute resolution.

International processing and changes

Information may be processed in locations different from the user's location, subject to applicable agreements and law. We may update this policy by posting a revised version and date on this page.