Legal
Privacy Policy
Last Updated: August 13, 2026
1. Introduction
This Privacy Policy explains how LDImpact LLC ("LDImpact," "we," "us," or "our") collects, uses, and shares information in connection with the LDImpact service (the "Service"). It applies to information we process as part of providing the Service. Capitalized terms not defined here have the meaning given in our Terms of Use.
2. Who We Are
LDImpact LLC is the entity responsible for the Service; our contact details appear at the end of this Policy. For Customer Data that we process on behalf of a Customer (or a Service Provider's Client Organization), the Customer generally determines the purposes of processing, and we act as a service provider/processor.
3. Information We Collect
- Account information. When you create an account, we collect information such as your name (if provided), email address, organization, role, and a securely hashed password.
- Customer Data. We collect the data you or your Authorized Users submit to the Service, such as L&D program data, metrics, and the analyses and results you generate.
- Usage and log data. We automatically collect technical information such as IP address, browser type, device information, pages accessed, and timestamps, to operate and secure the Service.
- Cookies. We use a strictly necessary session cookie to keep you logged in (see Section 11).
4. How We Use Information
- To provide, operate, maintain, and secure the Service;
- To authenticate users and enforce access controls and data isolation;
- To generate the analyses and AI-assisted insights you request;
- To provide customer support and respond to inquiries;
- To monitor, troubleshoot, and improve the Service;
- To comply with legal obligations and enforce our Terms; and
- To communicate with you about the Service.
We do not sell your personal information, and we do not use Customer Data to serve advertising.
5. Multi-Tenant Data Isolation
The Service is multi-tenant. Each organization's Customer Data is logically separated so that users of one organization cannot access another organization's data. For Service Provider Subscriptions, each Client Organization is a separate, isolated workspace.
6. AI-Powered Features
The Service offers optional AI-assisted interpretive insights. When these features are used, a limited, aggregate summary of analysis results is transmitted to our AI sub-processor to generate interpretive text. This summary is designed to exclude individual-level personal data. AI-generated content is provided for informational purposes and may contain inaccuracies.
7. How We Share Information; Sub-Processors
We share information only as needed to provide the Service and as described here. We use trusted sub-processors, including:
- Amazon Web Services (AWS) — cloud hosting, compute, storage, and database infrastructure (United States).
- Anthropic — provider of the AI functionality used to generate interpretive insights, which receives the aggregate summary described in Section 6.
We may also disclose information to comply with law or valid legal process; to protect the rights, safety, and security of LDImpact, our customers, or others; and in connection with a merger, acquisition, or sale of assets, subject to appropriate protections.
8. Data Retention
We retain account information for as long as your account is active and as needed to provide the Service, and we retain Customer Data in accordance with your subscription and our Terms. Following termination, we may retain data for a limited period to allow export, after which it is deleted in the ordinary course, subject to legal requirements and routine backup cycles.
9. Data Security
We maintain administrative, technical, and organizational safeguards designed to protect information, including encryption of data in transit, hashing of passwords, role-based access controls, and per-organization data isolation. See our Information Security Practices for more detail. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Your Rights and Choices
Depending on your location and role, you may have rights to access, correct, delete, or export certain personal information, or to object to or restrict certain processing. Because much of the information we process is Customer Data controlled by a Customer, requests relating to such data should be directed to the relevant Customer; we will assist our Customers in responding as required. To exercise rights or make a request, contact us at support@ldimpact.com.
11. Cookies
We use a strictly necessary, HTTP-only session cookie to authenticate you and maintain your session. This cookie is required for the Service to function and is not used for advertising or cross-site tracking. Disabling it will prevent you from logging in.
Our public website also uses Google Analytics, which sets cookies to help us understand aggregate visitor activity — such as which pages are viewed, how visitors arrive, and general location — so we can improve the site. This information is collected in aggregate and is not used to identify you individually. You can opt out using the Google Analytics Opt-out Browser Add-on or your browser’s cookie settings.
12. International Data Transfers
The Service is operated in the United States. If you access the Service from outside the United States, you understand that your information will be processed in the United States, where data-protection laws may differ from those in your jurisdiction.
13. Children's Privacy
The Service is a business tool that is not directed to children, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us personal information, contact us and we will take appropriate steps.
14. Third-Party Links
The Service may contain links to third-party sites or services. We are not responsible for their privacy practices, and we encourage you to review their policies.
15. Changes to This Policy
We may update this Policy from time to time. We will post the updated Policy with a new "Last Updated" date and, for material changes, provide additional notice where appropriate.
16. Contact Us
Questions or requests regarding this Policy may be directed to: