Last Modified: May 13, 2026
We value the trust that you have placed in Mosaic Learning, Inc. (“we,” “our,” or “us”), and protecting personal information is our priority. This Privacy Policy (“Policy”) describes how Mosaic Learning, Inc. and its affiliates (collectively, the “Company”) collect, use, disclose, retain, safeguard, transfer, delete, and otherwise process (collectively, “Processing”) personal information of individuals who engage with the Company for support, services, or otherwise, visit our website(s) (“Website”), use our products and services (including the Combobulate and Forge platforms), or interact with the Company on social media. Depending on the context, the Company may act as a business, controller, or similar primary decision-maker with respect to personal information, or as a service provider, processor, or contractor processing personal information on behalf of a customer.
For the purposes of this Policy, “personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household. Personal information does not include deidentified or aggregated information, or publicly available information as defined under applicable law.
This Policy is intended to help ensure you are informed about our privacy practices and affirms our commitment to maintaining the accuracy, confidentiality, security, and appropriate use of personal information. The Company respects your privacy and is committed to protecting personal information in accordance with applicable U.S. federal and state privacy, consumer protection, and data security laws and regulations.
By visiting the Website, using our services, engaging with our social media, using the Combobulate or Forge platforms, or otherwise providing information to us, you acknowledge this Policy and understand that we may process your personal information as described in this Policy. Where required by applicable law, we will obtain your consent before engaging in certain processing activities.
This Policy is effective as of the “Last Modified” date above and will remain in effect except with respect to any of its provisions that are changed in the future. We reserve the right to change this Policy at any time. Changes, modifications, additions, or deletions will be effective immediately upon their posting to the Website or upon your otherwise receiving notice, for all future interactions. Your continued use of the Website or our other services after we post any such modifications will constitute your acknowledgement of the modified Policy and your agreement to abide by and be bound by the modified Policy on a going-forward basis. We will also update the “Last Modified” date when we post substantive changes to the Policy.
Subject to applicable law and certain legal and contractual limitations, you may have the right to opt out of certain processing activities, limit certain uses or disclosures of your personal information, withdraw consent where we rely on consent, or exercise other privacy rights available under applicable law. Exercising these rights may limit our ability to provide you with our services, act on your behalf, or engage with you as you would like. To exercise these choices, you may contact the Privacy Officer using the contact information provided below, including by email or in writing, at any time. We will inform you of the implications of your request and respond within the time required by applicable law.
Any such request will apply thereafter and not to information handling practices that have been previously undertaken based on lawful grounds existing at the time.
Our Website and services are not directed to children under 13, and we do not knowingly collect personal information directly from children under 13 without legally sufficient authorization. If we learn that we have collected personal information from a child under 13 in a manner not permitted by applicable law, we will take reasonable steps to delete that information. If you believe a child under 13 has provided personal information to us unlawfully, please contact us using the information below. To the extent a minor above that age is not otherwise legally able to consent, we may require consent from a parent, guardian, or other person with legal authority.
The personal information which the Company may collect includes, but is not limited to:
In addition, if you contact us, we may keep a record of your communication to help solve any issues you might be facing.
Personal information may be collected and processed by the Company for business, commercial, operational, security, compliance, and other notified purposes that include, but are not limited to:
Personal information may be collected by the Company in a number of ways, including in person, through our Website, by email, through our applications or other software, and from third parties whom you have authorized to disclose personal information to us.
If you provide information about a third party or authorize a third party to do so, we will assume you have the rights, permissions, and, where required, consent necessary for us to process that information as described in this Policy.
For quality assurance purposes, telephone calls to the Company’s lines may be recorded. If your call is subject to a quality assurance program, you will be advised before speaking to a representative.
When you, or an end user of one of our customers’ branded portals operated on the Forge platform or another service that offers SMS-based two-factor authentication (“2FA”), choose to enable SMS as your 2FA delivery channel, we collect and store your mobile phone number to deliver account-security verification messages, including one-time passcodes (“OTPs”), when you sign in or take a sensitive action. By providing your mobile phone number and enabling SMS as your 2FA delivery channel, you expressly consent to receive these transactional account-security text messages from us at that number. We may also retain records of your SMS 2FA enrollment, consent, configuration changes, and related account activity, including timestamp, IP address, user agent, and the version of the disclosure presented, as reasonably necessary to provide the service, maintain security, and demonstrate compliance. Consent to receive these SMS messages is not a condition of purchase of any goods or services.
Separately from the account-security SMS messages described above, the Forge platform offers an optional “Union messaging” feature. When you, as an end user of one of our customers’ branded portals operated on the Forge platform and a member of one of a customer’s affiliated union locals, choose to opt in to “Union messaging” in your Forge account settings, you expressly consent to receive informational text messages from your union local, sent by an authorized administrator of that local (a “Sub-Tenant Administrator”) through the Forge platform, such as contract-vote reminders, urgent worksite notices, meeting reminders, and member action alerts. Consent to receive these SMS messages is not a condition of purchase of any goods or services.
We may collect or process sensitive personal information only as reasonably necessary to provide requested services, maintain account and platform security, process payments, comply with law, prevent fraud, or for other purposes permitted by applicable law. We do not use sensitive personal information to infer characteristics about you except as permitted by law. Where required by applicable law, we will obtain your consent before collecting or processing sensitive personal information.
We and our service providers may collect personal information through cookies and similar technologies on our Website. Cookies are small text files stored on your device that contain a unique identifier, allowing us to recognize your browser or device over time. We use cookies and similar technologies for essential site functionality, authentication, security, performance, analytics, personalization, and, where permitted by law, advertising and targeted advertising. These technologies may collect information regarding the date and time of your visit, pages viewed, links clicked, searches performed, features used, and other interactions with our Website and services.
We may use third-party advertising and analytics technologies, including retargeting or other targeted advertising tools, to help us advertise online, measure campaign effectiveness, and better understand user engagement. These technologies may use cookies or similar tools to infer your interests based on your visits to our Website and other online services. Depending on your state of residence, you may have the right to opt out of the use of your personal information for targeted advertising.
We use analytics tools, including Google Analytics, to help us understand how users interact with our Website and services. These tools may collect information such as IP address, device and browser information, pages visited, time spent on pages, referring URLs, and other usage data. We use this information to maintain, improve, and analyze our Website and services. For more information about how Google collects and processes data, please review Google’s applicable privacy materials and controls.
Web beacons (also called “clear GIFs” or “pixel tags”), and similar technologies, may be used in conjunction with cookies to track activity on our Website or in email messages. Since they are often used in combination with cookies, if you disable cookies, the web beacons may detect only limited or non-identifiable information.
We may also use web beacons, customized links, and similar technologies to understand whether emails or newsletters we send are opened, whether links are clicked, and how users engage with our Website. Information collected through these tools may be used for analytics, reporting, service improvement, and related business purposes, and may in some cases be associated with your device or account as permitted by law.
Some cookies are necessary for the Website to function properly, while others are optional. You can manage certain cookie preferences through our cookie banner or preference tools where available, and you may also be able to control cookies through your browser settings. Disabling certain cookies may affect the functionality or availability of parts of the Website. Some third-party service providers may place their own cookies or similar technologies on your browser or device, and this Policy does not govern those third parties’ independent practices.
When you visit the Website, we may also collect clickstream and usage data, such as server address, domain name, device type, browser information, referring pages, and interactions with the Website. This information may be combined with other information we collect to help us analyze, secure, personalize, and improve your experience.
The Company’s Website features may be accessible from web-enabled mobile devices. The intent is to provide screens that are optimized for the size of the screen and operating systems. On some devices, functionality may be limited. If you use mobile-enabled services provided by our Website, we may receive information about you from your mobile device. This may also include information about your precise location if you have enabled location-based services on your mobile device. Some devices may allow you to opt out of this collection or access, and in those cases, you may be able to subsequently stop the collection or access. Please review your device settings for more information.
If you post a review, make a comment, or otherwise submit personal information on a public forum, such as social media accounts or public forums on our Website or other applications, your communications may be viewable by the public. When voluntarily disclosing personal information about yourself to other Company users, we are unable to control what may be done with that content. You should take all necessary precautions to protect your private information by not posting or publishing any information that you do not want in the public domain. While we strive to provide the highest level of confidentiality, you should review your personal privacy settings to further restrict any or all parts of your profile or certain other content or information.
The Company may collect personal information when you interact with our Website, including when you access the Website, communicate with the Company staff, purchase products or services, register or create or edit your account, sign up to receive newsletters and information, fill out online applications, surveys or forms, send or respond to our emails, or otherwise communicate with us.
We may disclose personal information to third parties for the purposes described in this Policy, including to service providers, contractors, processors, affiliates, business partners, professional advisors, government authorities, and other parties as permitted or required by law. In some cases, we process personal information on behalf of our customers and disclose information only in accordance with their instructions.
We may also disclose personal information when we believe in good faith that doing so is necessary or appropriate to: comply with applicable law, regulation, legal process, or governmental request; enforce our agreements; protect the rights, property, or safety of the Company, our users, customers, or others; detect, prevent, or address fraud, security, or technical issues; or in connection with an actual or proposed merger, financing, acquisition, reorganization, bankruptcy, sale of assets, or other corporate transaction.
If you believe that a third party has inappropriately disclosed your personal information to us, please contact that third party directly. If the third party does not sufficiently respond to your inquiries, please let us know immediately.
The Company takes care to ensure that personal information you provide to us is accessed internally only by individuals who need access to perform their job responsibilities and externally only by third parties with a legitimate business, contractual, legal, or compliance purpose. We will not use or disclose personal information except as described in this Policy, as otherwise disclosed at the time of collection, as instructed by our customer where we act on its behalf, or as required or permitted by law.
We do not sell personal information for money. We also do not share personal information with third parties for their own independent marketing purposes except as described in this Policy or as permitted by law. Where applicable state law uses the terms “sell” or “share” broadly to include certain disclosures for targeted advertising or cross-context behavioral advertising, we will honor applicable opt-out rights. We limit the personal information provided to affiliates and third-party service providers to what is reasonably necessary for them to perform services for us, and we contractually require appropriate privacy, confidentiality, and security protections. We do not use or disclose sensitive personal information for purposes other than those permitted by law or disclosed in this Policy.
The Company takes all reasonable steps to keep your personal information as accurate, complete and up to date as necessary to fulfill the purpose for which your personal information has been collected. If desired, you may verify the accuracy and completeness of your personal information in our records with our Privacy Officer.
Despite our efforts, errors sometimes do occur. Should you identify any incorrect or out-of-date personal information in your file, we will remedy such errors on a timely basis. You may request correction of the personal information we hold about you, though we may need to verify the accuracy of the new information you provide to us. If inaccurate personal information is mistakenly sent to a third party, we will communicate relevant changes to the third party where appropriate.
The Company will store your personal information only for as long as is reasonably necessary to fulfill the purpose for which the personal information was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements or obligations of the Company. Once your personal information is no longer needed, we will securely and effectively dispose of it.
To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.
In some circumstances, we may anonymize your personal information (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this anonymized information indefinitely without further notice to you.
You may request access to the personal information we maintain about you, subject to applicable law. This may enable you to receive a copy of certain personal information we have collected about you and information about how we process it. We may need to request specific information from you to help us verify your identity and authority to make the request. This is a security measure to help ensure that personal information is not disclosed to a person who does not have the right to receive it. We may not always be able to comply with your request in full, and if so, we will explain the basis for our decision as required by applicable law.
In some circumstances, you may have the right to request that we delete personal information we have collected from you or maintain about you, subject to applicable exceptions. We may deny deletion requests where retention is permitted or required by law, including to complete transactions, provide requested services, detect security incidents, comply with legal obligations, or exercise or defend legal claims. If we deny your request, we will explain the basis for the denial as required by applicable law.
Where required by applicable law, you may request a copy of certain personal information you have provided to us in a portable, to the extent technically feasible, readily usable format that allows you to transmit the information to another entity. This right may be limited to certain information and circumstances under applicable law.
The Company uses industry-standard measures, including administrative, organizational, technical, and physical safeguards, to help protect personal information from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction. We implement measures and processes to help keep your personal information secure and to maintain its quality, such as keeping electronic files in a secure environment with restricted access and use. We regularly review our security and related policies to adapt technology as new threats evolve and monitor our systems to help ensure the highest level of availability. If you have any questions about the security of our Website or your personal information, you can reach out to our Privacy Officer.
Access to private, sensitive, and confidential information, including personal information and sensitive personal information, is restricted to authorized employees or contractors with legitimate business reasons. The Company’s employees and contractors understand the importance of keeping your personal information private. All employees and contractors are expected to maintain the confidentiality of personal information.
Despite the security measures and significant steps the Company has taken to protect your personal information, no company can fully eliminate all security risks associated with processing personal information. The level of risk depends on the nature of the information at issue and how it is used. Accordingly, we cannot guarantee the security of any personal information provided to or received by us. We encourage you to provide only the information you are comfortable providing to third parties, remain alert for suspicious communications, and report suspicious activity to us as soon as possible.
If we determine that a security incident involving your personal information triggers a legal obligation to provide notice, we will investigate, take appropriate steps to contain and remediate the incident, and provide any required notices to affected individuals, customers, regulators, law enforcement, or others in accordance with applicable U.S. federal and state law. The timing, content, and method of any notice will be determined based on the facts of the incident and applicable legal requirements.
Our Website and our applications available from our Website or third-party platforms (including Google Play), if any, are governed by the provisions and practices stated in this Policy. Our Website and such applications may contain links to third-party sites or applications that are not governed by this Policy. Although we endeavour to link only to sites or applications that share our commitment to your privacy, please be aware that this Policy will no longer apply once you leave our Website or such applications and that we are not responsible for the privacy practices of third-party sites or applications. We therefore suggest that you closely examine the respective privacy policies of third-party sites and applications to learn how they collect, use, and disclose your personal information.
This Policy and all related matters shall be interpreted and construed in accordance with the laws of the State of Maryland and the applicable federal laws of the United States.
Residents of certain U.S. states may have privacy rights under applicable state privacy laws, including rights relating to access, correction, deletion, portability, sensitive personal information, targeted advertising, sales, and profiling. The availability and scope of these rights vary by state and may change over time.
Depending on your state of residence, you may have the right to:
The specific rights available to you may vary depending on your state of residence, the nature of your relationship with us, and whether we process the information as a business, controller, service provider, processor, or contractor on behalf of a customer.
To exercise any applicable privacy rights, you may submit a request to us by emailing privacy@mosaiclearning.com or calling us at 301.441.4700. We may take steps to verify your identity and authority before responding to your request, and you may designate an authorized agent where permitted by law.
If we deny your request, you may appeal our decision by emailing privacy@mosaiclearning.com with the subject line “Privacy Rights Request Appeal.” We will review and respond to your appeal in accordance with applicable law.
In many cases, we collect and process personal information directly for our own business purposes described in this Policy. In other cases, we provide our products and services to business customers and process personal information on their behalf and under their instructions. Where we act as a service provider, processor, or contractor to a customer, that customer is responsible for certain decisions about how your personal information is processed, including responding to certain privacy rights requests. If you submit a request to us relating to personal information we process on behalf of a customer, we may refer you to that customer or work with the customer to respond as required by applicable law.
We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure.
The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Website, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.
Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Website. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Website.
It is our policy to post any changes we make to this Policy on this page. If we make material changes to how we treat our users’ personal information, we will notify you through a notice on the Website home page. The date the Policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date, active, and deliverable email address for you, and for periodically visiting our Website and this Policy to check for any changes.
Your privacy is very important to us. We are happy to provide you with a copy of this Policy and to discuss any of its contents with you.
The Company’s Privacy Officer is responsible for the implementation of this Policy and monitoring our adherence to its terms and all applicable laws. The Privacy Officer also handles questions and concerns about our Policy, as well as personal information access requests and complaints. The Privacy Officer may be contacted at:
Privacy Officer, Mosaic Learning, Inc.
7055 Samuel Morse Drive
Suite 210
Columbia, MD 21046