Scormio.
How it worksPricingFAQContact
Sign in
Get started

Privacy Policy

Scormio LLC

Effective Date: May 18, 2026 · Last Updated: October 17, 2026

This Privacy Policy describes how Scormio LLC ("Scormio," "we," "us," or "our") collects, uses, and discloses information about you when you use our website at scormio.com and our Software as a Service platform (collectively, the "Service"). By using the Service, you agree to the collection and use of information as described in this Privacy Policy.

1. Information We Collect

1.1 Information You Provide

1.2 Information Collected Automatically

1.3 Information from Third Parties

2. How We Use Your Information

We use the information we collect to:

2.1 AI Processing

Module generation relies on third-party AI APIs: Anthropic's Claude for storyboard and text generation, and OpenAI for text-to-speech narration and Whisper transcription. When you submit content for module generation, that content is transmitted to these providers, processed to produce Output, and returned to the Service. AI Output is statistical in nature and may contain inaccuracies, omissions, bias, or fabricated references; you remain responsible for reviewing and validating Output before deploying it (see Section 10 of our Terms of Service for the full warranty disclaimer).

Scormio does not use AI to make automated decisions that produce legal or similarly significant effects about you, your employees, or your learners. The Service generates training content; it does not score, rank, or evaluate individual people. We do not use Your Content or Output to train AI models, and we have contractual commitments from our AI subprocessors that are consistent with that position. AI providers may temporarily retain prompts and responses to detect abuse and operate their services; their retention and use are governed by their own published policies, which we link in Section 3.1.

3. How We Share Your Information

We do not sell your personal information. We share your information only in the following circumstances:

3.1 Service Providers

We share information with third-party service providers who perform services on our behalf:

Several of these subprocessors (including Anthropic, OpenAI, Stripe, Resend, Railway, and Cloudflare) are based in the United States. If you access the Service from the European Economic Area, the United Kingdom, or another jurisdiction with cross-border transfer requirements, your information may be transferred to and processed in the United States or other countries where these providers operate. Where the subprocessor offers them, we rely on Standard Contractual Clauses or equivalent transfer mechanisms. We do not use Your Content or Output to train AI models, and our service providers operate under contractual obligations consistent with that commitment. You should review each subprocessor's privacy policy for details on its safeguards.

3.2 Legal Requirements

We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Scormio, our users, or others.

3.3 Business Transfers

If Scormio is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on the Service before your information is transferred and becomes subject to a different privacy policy.

4. Data Retention

While your subscription is active, we retain your account, modules, and source uploads. If your subscription lapses and you hold credit-pack credits, we retain your data for 90 days of inactivity — any sign-in resets the clock. If your subscription lapses with no credits remaining, we retain your data for 30 days. Deleting a module removes its sources and outputs immediately. If you request account deletion, we delete or anonymize your data within 7 days and email confirmation. We may retain limited information where required for legal or compliance purposes.

Mio assistant conversations are retained for 90 days and then deleted automatically. Conversations from signed-out visitors are stored against a browser session identifier, not a named account.

Module packages (SCORM files) you have downloaded are yours — we have no control over copies you retain locally or upload to your LMS.

5. Data Security

We implement industry-standard security measures to protect your information, including encrypted connections (HTTPS/TLS), secure session management with HttpOnly cookies, and access controls. However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information.

In the event of a data breach affecting your personal information, we will notify affected users without undue delay, and in any event within 72 hours of becoming aware of the breach where required by applicable law. Notification will be delivered to the email address associated with your account and will include the information required by the applicable law, including the nature of the breach, the categories of data involved, and the steps we are taking in response.

6. Your Rights and Choices

6.1 Account Information

You may update or correct your account information by contacting us.

6.2 Data Deletion

You may request deletion of your account and associated data by contacting us. We will process deletion requests within 7 days and email confirmation, subject to legal retention requirements.

6.3 California Residents (CCPA)

California residents have the right to know what personal information we collect, request deletion of personal information, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us.

6.4 European Users (GDPR)

If you are located in the European Economic Area, you have rights under the General Data Protection Regulation (GDPR) including the right to access, rectify, erase, and port your personal data, and the right to object to or restrict processing. Our lawful basis for processing is performance of a contract (providing the Service) and legitimate interests (security and fraud prevention). To exercise your rights, contact us.

6.5 Tennessee Residents (TIPA)

If you are a Tennessee resident and the Tennessee Information Protection Act ("TIPA") applies to our processing of your personal information, you may have the rights to confirm whether we process your personal information, to access it, to correct inaccuracies, to delete it, to obtain a portable copy, and to opt out of processing for purposes of targeted advertising, the sale of personal information, or profiling that produces legal or similarly significant effects on you. Scormio does not sell personal information, does not engage in targeted advertising, and does not perform automated profiling that produces legal or similarly significant effects on individuals. To exercise applicable rights, contact us or email [email protected]. If we deny a request, you may appeal by replying to our denial or by emailing [email protected] with the subject line "TIPA Appeal." Verification, response, and appeal of requests are handled subject to our internal procedures and applicable statutory timelines.

7. Cookies

We use session cookies for authentication and maintaining your logged-in state. These cookies are essential for the Service to function and cannot be disabled without preventing you from using the Service. On our public pages and purchase confirmation page we also use Google Analytics and Google Ads cookies to measure aggregate traffic and whether our ads lead to sign-ups and purchases. We do not use these cookies for remarketing or to target ads based on your activity on other sites, and we do not sell your personal information. You can manage Google's ad cookies at adssettings.google.com or block cookies in your browser settings.

8. Children's and Minors' Privacy

The Service requires account holders to be at least 18 years of age and is not directed to or intended for use by minors. We do not knowingly collect personal information from anyone under 18, and we do not knowingly collect any personal information from children under 13. If you believe we have inadvertently collected information from a minor, please contact us and we will delete it promptly. Learners viewing modules in a customer's LMS interact with the LMS, not with Scormio directly; the customer (not Scormio) is responsible for any age-related compliance applicable to its learners.

9. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party sites you visit.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on this page with an updated effective date and, where appropriate, by sending you an email notification. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

11. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, including requests to access, correct, or delete your personal information, please contact us or email [email protected]. We aim to respond to verifiable privacy requests within 7 days.

Scormio LLC
scormio.com
Kingsport, Tennessee