Legal

Privacy policy

Last updated: April 19, 2026

Overview

Chronos (“we”, “us”) provides a workforce platform for learning, hiring, and compliance. This policy explains what data we collect, how we use it, and the rights you have over it.

Data we collect

  • Account data: name, work email, role, organization, authentication credentials.
  • Learner data: enrollment records, progress, assessment submissions, certificate issuances. On self-hosted deployments, this data never leaves your infrastructure.
  • Workforce data: demographic fields (gender, ethnicity, veteran status, etc.) collected only when the customer enables RAPIDS/PIRL reporting and the apprentice consents.
  • Usage data: logs of pages visited, actions taken, and approximate IP location, used for security and product analytics.
  • Billing data: company name, billing address, and payment method details (processed by our payment processor — we never see full card numbers).

How we use it

  • To operate, secure, and improve the Chronos platform.
  • To provide support, notify of incidents, and send transactional emails.
  • To comply with legal obligations (tax, DOL audits at customer request, etc.).
  • We never sell personal data. We never use learner data to train generic AI models.

Sub-processors

For hosted customers we use: AWS (hosting), Postmark / SES (email), Stripe / Paystack (billing), Anthropic (AI assessment scoring, subject to DPA). Self-hosted customers can configure any or none of these.

Retention

We retain customer data for the life of the subscription. On termination, we delete all customer data within 30 days unless retention is required by law. Self-hosted deployments retain according to customer policy.

Your rights

Individuals covered by GDPR, UK GDPR, CCPA, or similar laws can request access, correction, export, or deletion of their data at any time via info@itschronos.com.

Security

TLS in transit. At-rest encryption on databases and backups. Role-based access controls. SOC 2 Type II in progress. Incident response is coordinated with the customer's designated security contact.

Children

Chronos is not directed to children under 13. Programs serving minors (apprenticeship prep, youth workforce programs) require explicit guardian consent captured at enrollment.

Changes

Material changes to this policy will be emailed to account administrators at least 30 days before they take effect.

Contact

Questions about privacy: info@itschronos.com.