Privacy Policy

ZillionLMS is operated by Zillion eLearning, with offices in Islamabad, Pakistan and in Buffalo, Wyoming, United States. You can reach us about anything on this page at lms@zillionelearning.com.

There are two different relationships here, and the difference matters. For this website, we decide what is collected and why. For the learning platform itself, your employer decides: they choose what to record about your training and we hold it on their instruction. If you are a learner asking why your completion data exists, the answer sits with your employer, and we will help them answer it.

Inside a customer workspace, an account carries:

• Your name, email address, role, timezone and the date the account was created
• Which courses you are enrolled in, whether you completed them, your score and the dates
• Certificates issued to you, and when they expire
• Points and the reason each was awarded, where gamification is switched on
• Which groups you belong to
• Course progress from the content itself, including SCORM and xAPI records of what you opened and how far you got
• Whether you agreed to marketing email, and when you last changed that answer

Administrator actions are also written to an audit log, so a customer can see who changed what in their own workspace.

If you only read the marketing pages, we collect nothing that identifies you until you accept analytics cookies or send us something.

If you use the contact form or start a trial, we receive what you type into it: your name, your email address, your company and your message. That reaches us as an email and is used to reply to you.

Four kinds, and only the last needs your permission.

Decline and nothing in that last row is set. You can change your mind at any time by clearing the cookies for this site, which makes the banner ask again.

We do not sell data and we do not share it for anyone else's advertising. These are the services the platform genuinely calls:

• Supabase holds the database, the sign-in system and uploaded files
• Vercel runs and delivers the application
• Resend sends account and notification email
• Anthropic and OpenAI generate course drafts, images and narration when an administrator asks for them. What is sent is the instruction and the course text, never a learner's records
• Google Analytics and Tag Manager, Meta, LinkedIn, on the marketing site only, and only after you accept
• BambooHR, only if your employer switches on that integration themselves
• Vimeo and YouTube, where a customer embeds a video in a course

Where it is held. Our hosting and database run on Supabase and Vercel infrastructure outside Pakistan. We do not currently offer storage inside a specific country, and we would rather say so than imply otherwise.

Traffic to the site uses TLS, and our hosting providers encrypt what they store. That protection is a property of Supabase and Vercel, and it is theirs rather than something we implement ourselves.

ZillionLMS holds no security certification of its own. We are not SOC 2 audited, not ISO 27001 certified, and not HIPAA or PCI attested. Some of our providers hold those; we do not, and we will not imply that we do by standing close to them.

Learner records live for as long as your employer keeps their subscription, because they are the point of the product: a completion record that vanishes cannot prove training happened. When a workspace closes, its data is deleted.

Contact form messages are kept as email while we are still talking to you. Analytics data follows Google's own retention, which is capped at 14 months.

These are built into the product rather than being a promise to answer an email:

• Get a copy. Your profile page exports everything the platform holds about you as a file, including enrolments, certificates and points.
• Ask for deletion. Your profile page raises a deletion request. Because your employer is the one who decides, it goes to them for approval rather than happening silently.
• Change your marketing answer. One switch on your profile, recorded with the date you changed it.

You can also write to us at lms@zillionelearning.com and we will act on it.

ZillionLMS is workplace software sold to organisations. It is not intended for children and we do not knowingly create accounts for them.

If this changes in a way that affects what we collect or who handles it, we will say so here and date it. This version is current as of August 2026.