Privacy Policy

Scorms.ai is an initiative by Legit (www.wearelegit.ai), a studio building AI-native products and managed services. For the purposes of EU and UK data protection law, Legit is the data controller for personal data processed via this website and any correspondence at hello@wearelegit.ai.

You can contact us at any time about your personal data using the email address above.

Website analytics (Vercel Web Analytics)

We use Vercel Web Analytics to measure aggregate traffic to scorms.ai. The service is cookie-less, does not use device fingerprinting, does not build cross-site profiles, and IP addresses are processed transiently and not stored. We see things like which pages are viewed and which referrers send the most traffic — never who you are.

Analytics only loads after you accept the consent banner. If you decline, no analytics events are sent from your browser.

Email correspondence

When you email us — for instance, to ask about a pilot via hello@wearelegit.ai — we receive and store the contents of your message, your email address, and any information you choose to include (such as your company, role, training topic, current LMS, or audience size). We use that information solely to reply, scope a possible engagement, and follow up where appropriate.

Server logs

Our hosting provider, Vercel, processes standard server logs (request IP, user agent, timestamps) for the short period needed to deliver and protect the service against abuse. These logs are not used for marketing or profiling and are not joined with any other data we hold.

Local storage

We store your cookie-banner choice in your browser's localStorage under the key scorms-consent, so we don't ask you again on every visit. This is a strictly necessary functional storage entry and contains only the values accepted or declined.

Under the EU General Data Protection Regulation (GDPR) and the UK GDPR, we rely on the following lawful bases:

• Consent (Art. 6(1)(a)) — for loading website analytics, on the basis of your choice in the consent banner. You may withdraw this consent at any time by clearing your browser's site data for scorms.ai.
• Legitimate interests (Art. 6(1)(f)) — for handling email enquiries you initiate, for replying to you, and for keeping reasonable security and operational logs. Our legitimate interest is to operate Scorms.ai and serve people who choose to contact us. We have considered your rights and freedoms, and the processing is limited and proportionate.
• Pre-contractual steps and contract performance (Art. 6(1)(b)) — where your enquiry leads to a quote or pilot engagement, the data you've shared is processed to take steps at your request and, if we proceed, to perform the contract.

• Analytics: aggregate, non-personal metrics retained by Vercel per their analytics retention policy. We do not export or store individual events ourselves.
• Email correspondence: kept for as long as it is useful to the conversation, and for up to 24 months after our last meaningful contact, after which it is deleted. If a pilot or commercial relationship begins, we retain the relevant records for the duration of the engagement and for the period required by tax and accounting law thereafter.
• Server logs: retained for short operational and security windows by our hosting provider, typically days to a few weeks.
• Local storage: kept in your browser until you clear it.

We do not sell, rent, or trade personal data. We share limited information only with the providers we rely on to operate the site:

• Vercel Inc. — hosting and Web Analytics. Vercel acts as our processor; data is processed in line with their privacy policy and data processing addendum.
• Email provider — used by Legit to receive and reply to messages sent to hello@wearelegit.ai.
• Font delivery — Inter is loaded from Google's font CDN; Satoshi is loaded from Fontshare. Loading a font involves a standard browser request that exposes basic technical data (IP, user agent) to those services.

Where our processors transfer data outside the European Economic Area, those transfers are covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

If you are in the EU, EEA, or UK, you have the following rights under the GDPR / UK GDPR in relation to your personal data:

• The right to be informed about how we use your data (this notice).
• The right of access — to ask for a copy of the personal data we hold about you.
• The right to rectification — to correct inaccurate or incomplete data.
• The right to erasure — to ask us to delete your data, where applicable.
• The right to restrict processing in certain circumstances.
• The right to data portability — to receive your data in a portable format.
• The right to object to processing based on legitimate interests (including a right to object at any time to direct marketing, although we do not currently send marketing).
• The right to withdraw consent at any time, where consent is the legal basis.
• The right to lodge a complaint with a supervisory authority — in Finland, the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto). You may also complain to the authority of your usual residence or place of work.

To exercise any of these rights, email hello@wearelegit.ai. We aim to respond within 30 days.

Scorms.ai does not use third-party advertising or tracking cookies. The only browser-storage entries set by this site are:

• scorms-consent — localStorage, functional, stores your banner choice.

Vercel Web Analytics is cookie-less by design. If, in the future, we add any non-essential cookies or similar technologies, we will update this policy and the consent banner accordingly.

We use HTTPS for all traffic, host on Vercel's managed infrastructure, and limit access to email correspondence to members of the Legit team who need it to do their work. No system can be 100% secure, but we apply reasonable, industry- standard practices and respond promptly to incidents that materially affect personal data.

Scorms.ai is a business-to-business marketing site and is not directed at children. We do not knowingly collect personal data from anyone under 16.

We may update this policy from time to time — for example if our tools change or if law requires it. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be flagged on this page.

For any privacy question, request, or concern:

Legit
Email: hello@wearelegit.ai
Web: www.wearelegit.ai