Privacy Policy

---

 Effective Date: June 1, 2025

1. Introduction

WorkSafe US, BuildSafe US, and FedSafe US (collectively, "the Companies," "we," "us," or "our") are committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, disclose, and protect personal data when you access or use the Docebo Learning Management System ("LMS" or "Platform"), a cloud-based Software-as-a-Service (SaaS) platform hosted on Amazon AWS Public Cloud. This policy applies to all users, including employees, contractors, partners, and other authorized individuals ("Users") accessing the Platform for training and compliance purposes.By using the Platform, you consent to the data practices described in this Privacy Policy. If you do not agree with this policy, you must not access or use the Platform. For additional details on Docebo’s data practices, refer to Docebo’s Privacy Policy.

2. Information We Collect

We collect the following types of information when you use the Platform:

2.1 Personal Data

Account Information: Name, email address, job title, and other identifiers provided during registration or by your employer/organization.

Usage Data: Information about your interactions with the Platform, such as courses accessed, completion status, assessment results, and time spent on the Platform.

User-Generated Content: Content you create or upload, such as responses to assessments, forum posts, or messages in community features.

Technical Data: IP address, browser type, device information, and login timestamps collected automatically when you access the Platform.

2.2 AI-Generated Data

The Platform uses AI-powered features (e.g., virtual coaching, content creation via Edugo.AI) that may process your inputs to generate personalized learning experiences. These inputs may include text responses or preferences, which are stored and analyzed to improve your training experience.

2.3 Non-Personal Data

We may collect aggregated or anonymized data, such as platform usage statistics, to improve the Platform’s functionality and performance. This data does not identify you individually.

3. How We Use Your Information

We use your information for the following purposes:

To Provide and Manage the Platform: To create and manage your account, deliver training content, track progress, and provide compliance reports.

To Personalize Learning: To tailor course recommendations and AI-generated content based on your role, preferences, and performance.

To Ensure Compliance: To monitor completion of mandatory training for workplace safety (WorkSafe US), construction safety (BuildSafe US), and federal compliance (FedSafe US).

To Improve the Platform: To analyze usage patterns and enhance features, accessibility, and user experience.

To Communicate: To send notifications about training deadlines, Platform updates, or support-related matters.

To Ensure Security: To detect and prevent unauthorized access or misuse of the Platform.

4. Legal Basis for Processing

We process personal data based on the following legal grounds:

Contractual Necessity: To fulfill our obligations to provide training and compliance services as part of your employment or agreement with the Companies.

Legitimate Interests: To improve the Platform, ensure security, and analyze usage trends, provided such interests do not override your rights.

Compliance with Legal Obligations: To meet regulatory requirements, such as workplace safety standards or data protection laws (e.g., GDPR, CCPA, FedRAMP).

Consent: Where required, we will obtain your consent for specific data processing activities, such as optional AI-driven personalization features.

5. Data Sharing and Disclosure

We may share your personal data in the following circumstances:

With Docebo: As the Platform provider, Docebo processes data on our behalf in accordance with its Privacy Policy and GDPR compliance standards.

Within the Companies: Data may be shared among WorkSafe US, BuildSafe US, and FedSafe US to manage training programs and compliance reporting.

With Service Providers: We use third-party providers (e.g., Amazon AWS for hosting, CDN providers for content delivery) to operate the Platform. These providers are bound by data protection agreements.

For Legal Purposes: We may disclose data to comply with legal obligations, respond to government requests, or protect the rights and safety of the Companies, Users, or others.

With Your Consent: We may share data with third parties if you explicitly consent, such as for integrations with external tools (e.g., HR systems via Docebo Connect).

We do not sell your personal data to third parties.

6. Data Security

We implement robust security measures to protect your data, including:

Encryption: Data is transmitted using Hypertext Transfer Protocol Secure (HTTPS) and Transport Layer Security (TLS) with 2048-bit encryption, managed by a trusted certificate authority.

Access Controls: Only authorized Users and Super-Administrators can access sensitive data, with role-based permissions configured via Docebo’s admin tools.

Compliance Standards: The Platform adheres to FedRAMP Moderate Authorization, SOC 2 Type II, and ISO 27001 standards to ensure data security.

Regular Audits: The Companies and Docebo conduct regular security audits to maintain Platform integrity.

Despite these measures, no system is completely secure. You are responsible for maintaining the confidentiality of your account credentials.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. For example:

Account information is retained for the duration of your access to the Platform or as required by compliance regulations.

Usage data and user-generated content may be retained to track training progress or for audit purposes.

Upon account termination, data may be deleted or anonymized, subject to applicable retention policies.

8. Your Data Protection Rights

Depending on your location, you may have the following rights under data protection laws (e.g., GDPR, CCPA):

Access: Request a copy of your personal data.

Rectification: Correct inaccurate or incomplete data.

Erasure: Request deletion of your data, subject to legal or contractual obligations.

Restriction: Restrict processing of your data in certain circumstances.

Portability: Receive your data in a structured, machine-readable format.

Objection: Object to processing based on legitimate interests.

Withdraw Consent: Withdraw consent for data processing where consent is the legal basis.

To exercise these rights, contact us at contact@fedsafe-us.com. We will respond within the timeframes required by law (e.g., 30 days under GDPR).

9. International Data Transfers

The Platform is hosted on Amazon AWS Public Cloud, with data centers potentially located outside your country of residence. For Users in the European Economic Area (EEA), data transfers comply with GDPR requirements, including Standard Contractual Clauses (SCCs) and Docebo’s Data Processing Agreement (DPA). For details, see Docebo GDPR Compliance.

10. Accessibility

The Platform is designed to meet accessibility standards, including WCAG 2.1 compliance, with features like keyboard navigation and screen reader support. For accessibility-related inquiries, contact the Companies’ Super-Administrators at contact@fedsafe-us.com

11. Cookies and Tracking

The Platform uses cookies and similar technologies to enhance functionality and track usage. You can manage cookie preferences through your browser settings or the Platform’s cookie consent tool (if enabled). For more information, refer to Docebo’s Cookie Policy at Docebo Cookie Policy.

12. Third-Party Integrations

The Platform may integrate with third-party tools (e.g., HR systems, video conferencing via Docebo Connect). These integrations are subject to the respective third-party privacy policies. Users will be notified when third-party integrations require additional data sharing.

13. Children’s Privacy

The Platform is not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child’s data has been collected, please contact us immediately.

14. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Updates will be posted on the Platform or communicated via email. Continued use of the Platform after such changes constitutes acceptance of the revised policy.

15. Contact Information

For questions, concerns, or to exercise your data protection rights, contact:

WorkSafe US, BuildSafe US, FedSafe US
Email: contact@fedsafe-us.com

Docebo Support: For platform-specific inquiries, visit Docebo Help & Support.

16. Data Protection Officer

For GDPR-related inquiries, contact our Data Protection Officer at contact@fedsafe-us.com

By using the Docebo LMS, you acknowledge that you have read, understood, and agree to this Privacy Policy.

Any information collected by us, relating to an identifiable person, shall be used only in accordance with the procedures and for the purposes that are here acknowledged to the data subject and where the latter, as required by law, has expressly consented.