Who we are
PowerLMS Pro (powerlmspro.com) is operated by Balae Corporation, as part of the PowerKit Pro family of apps. It is a course platform for schools, trainers and businesses, and the same account also runs these tools: PowerLMS Pro, PowerForms Pro, PowerBooking Pro, PowerWaitlist Pro, PowerLoyalty Pro, PowerQR Pro, PowerLinks Pro, PowerCard Pro, PowerReviews Pro, PowerBid Pro, PowerWaivers Pro, PowerMenu Pro, PowerCerts Pro, PowerEvent Pro, PowerSeat Pro.
What we collect
- Your account. Email address, the name you give us, a hashed password, and your plan. If you sign in with Google we also store your Google account id and profile picture so we can recognize you next time. We do not receive your Google password.
- What you make. The forms, booking pages, QR codes, link pages, cards, loyalty programs, waitlists, review walls, proposals, waivers, menus, certificates, event programs and seating charts you create, plus the files you upload for them.
- Students in PowerLMS Pro. When someone enrolls in a course we store, for the school that runs it, their name and email, a hashed password if they set one, their progress, quiz answers and scores, workbook and assignment answers, certificates, and anything they post in course discussions. Schools may also upload a member roster (by hand, from a spreadsheet or from Wild Apricot) so members-only courses know who may enroll. Lessons can be read aloud: the lesson text, never student data, is turned into audio by Cloudflare and cached.
- Your customers in PowerWaitlist Pro. When someone checks in we store the name they give, the optional phone and email, the service, who served them and the times, for the business that runs the waitlist. A text-message opt-in is stored with its time and source, and STOP replies are honored. Contact details are cleared after the business's retention period (365 days unless they choose less). Texts are sent through the business's own Twilio account.
- Your customers in PowerLoyalty Pro. When someone joins a business's loyalty program we store the name, email and optional birthday they give, their stamps and rewards, and whether they opted in to marketing email (with the time and network address of that choice). We hold this for the business that runs the program; customers can unsubscribe or delete their card from the card page at any time.
- What your visitors do. When someone scans a code, opens a card or clicks a link, we record the time, the page, a coarse location derived from the network address, and the device type, so you can see your analytics. We do not build profiles of your visitors.
- Payments. Stripe handles every card. We never see or store card numbers; we keep your Stripe customer id and what you bought.
- Email. We send account, reminder, approval and onboarding email through Resend. Every marketing email has an unsubscribe link.
How we use it
To run the tools you signed up for, to bill you, to answer support, to send the email you asked for, and to keep the service secure. We do not sell your data and we do not show ads.
Google user data
Sign in with Google asks only for your email address and basic profile (name and picture). We use it to create or sign in to your PowerLMS Pro account and for nothing else.
One optional feature asks for more, with its own Connect button that you can skip:
- Google Calendar (PowerBooking Pro). With your permission we read free/busy time from the calendars you tick so clients cannot book a time you are busy. We use Google's free/busy endpoint, which returns only time ranges, never event titles, guests or details. When a client books, reschedules or cancels, we create, update or delete that one appointment on a calendar you own and chose, with a Google Meet link if you turned that on. We never read or change your other events.
Your Google access token is stored encrypted and used only for the features above. Disconnect at any time from Account settings: the token is revoked and deleted, and synced busy time is removed. PowerLMS Pro's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In plain terms: we never use Google data for advertising, never sell it, never transfer it to anyone except as needed to provide the feature you turned on or as the law requires, and never let humans read it except with your consent for support, for security, or as the law requires. The optional Google review link finder in PowerReviews Pro sends only the business name you type to Google Places.
How we share, transfer and disclose Google user data
We do not sell Google user data, and we do not share, transfer or disclose it to anyone except in the cases below.
- Back to your own Google account. When a client books, reschedules or cancels, the appointment details (time, service, location, the client's name and email, links to reschedule or cancel, and a Google Meet link if you turned that on) are written to the Google Calendar you chose, with the client added as a guest, so Google sends them the invite. To let you pick which calendars to use, we also read the names of your calendars; we store only the ones you tick.
- To the people you choose, inside the feature. Your clients see only the open times on your booking page, never your events or your free/busy data. A client who books receives the invite for their own appointment from Google. We do not access your Google Contacts, Gmail or Drive.
- Our hosting provider, as a processor. Cloudflare stores your encrypted Google token and the busy time ranges we cache, on our behalf and only to run the service. It may not use them for anything else.
- When the law requires it. To comply with a valid legal process, or to protect the safety and security of users, as permitted by the Google API Services User Data Policy.
- If the business changes hands. In a merger, acquisition or sale of assets, under this same policy, with notice to you first.
Google user data is not shared with the other apps in our family (Inkstand, FlipbookWow, Round Robin Pro, House Stack Pro), with advertisers, data brokers or information resellers, and it is never used to serve ads. Google user data is not used to develop, improve or train generalized or non-personalized artificial intelligence or machine learning models.
Keeping and deleting Google data. Busy time ranges are refreshed and kept only while the calendar sync is on. When you disconnect Google in Account settings, or close your account, we revoke the token with Google and delete the token and cached busy times right away. Appointments already on your own Google Calendar stay there, under your control.
AI assistants (Claude, ChatGPT and others)
You can connect PowerLMS Pro to an AI assistant such as Claude or ChatGPT. Nothing is shared until you connect it yourself and approve access on our sign-in screen. Once connected, the assistant can use only the tools in our connector, acting as you and within your plan: when you ask it to, it reads or changes the things you made in PowerLMS Pro (and in the other family apps you use with the same login), and what a tool returns is sent to that assistant. The assistant's provider handles that data under its own privacy policy. We do not send Google user data (calendar busy times or tokens) through the connector. You can disconnect at any time from the assistant's settings or from Account settings, and the access stops right away. We keep when each connected app was last used and short error logs to fix problems. We never see your conversation with the assistant, only the tool requests it sends us.
Who else sees it
The services that run PowerLMS Pro: Cloudflare (hosting, database and file storage), Stripe (payments), Resend (email) and Google (sign-in and the Places lookup). Each sees only what it needs for its job. We also share data when the law requires it.
Cookies
One session cookie keeps you signed in and one short-lived cookie protects the Google sign-in handshake. No tracking cookies, no third-party ad pixels.
Keeping and deleting
Your data stays while your account is open. To close your account, email support@powerkitpro.com from the address on the account and we will delete it within 30 days. Public links you shared stop working when their content is deleted. Billing records stay as long as tax law requires.
Your rights and choices
Wherever you live, you can ask us to show you the personal data we hold about you, correct it, export it in a portable format, or delete it. Email support@powerkitpro.com from the address on your account and we answer within 30 days, at no charge. We do not sell personal data and we do not share it for cross-context advertising, so there is nothing to opt out of on that front. You can edit or delete what you created at any time from the dashboard, unsubscribe from tips and offers with the link in each message (receipts and account emails still arrive), and disconnect Google from Account settings.
Where data lives
PowerLMS Pro runs on Cloudflare's network with data stored in the United States. If you use it from outside the US, your data is transferred to and processed in the US under this policy.
Security
Passwords are stored as salted hashes, Google tokens are encrypted, every page is served over HTTPS, and payment card data never touches our servers (Stripe handles it). No system is perfectly secure; if we learn of a breach affecting your data we will tell you promptly.
Children
PowerLMS Pro is for businesses and is not directed at children under 13. We do not knowingly collect their data.
Changes
When this policy changes we update the date above and, for material changes, email account holders.
See also the terms of service.