Privacy Policy

GraceRoot Institute ("GraceRoot," "we," "us," or "our") respects your privacy. This Privacy Policy explains what personal information we collect through graceroot.institute and our related courses, assessments, and portals (the "Services"), how we use and safeguard it, and the choices you have.

The Services are operated by Academic Research Solutions Inc., dba GraceRoot Institute, 1790 Hughes Landing Blvd, #438, The Woodlands, TX 77380. By using the Services you agree to this Policy, which should be read together with our Terms of Service and Confidentiality Policy.

We collect the following categories of information:

Some assessments and reflections relate to your mental, emotional, or relational wellbeing. You choose what to share, and you may complete much of the Services without submitting sensitive reflections.

We use your information to:

• Create and manage your account and deliver the courses and assessments you enroll in;
• Track progress and seat time, grade assessments, and issue certificates of completion;
• Process payments, subscriptions, and installment plans;
• Provide support, respond to inquiries, and send enrollment, progress, and service-related emails;
• Support participant safety, including crisis detection in chat and forums;
• Maintain, secure, and improve the Services and understand how they are used;
• Comply with legal, regulatory, accreditation, and court-reporting obligations.

Because our programs address trauma, relationships, and recovery, some information you provide is sensitive. We treat this information with heightened care: access is limited to authorized staff, clinicians, and moderators who need it to support your learning or program compliance, and it is protected by the safeguards described below and in our Confidentiality Policy.

We share personal information only as needed to operate the Services, and only with:

• Service providers who process data on our behalf under contract — for example, payment processing (PayPal), cloud hosting and databases, file storage, email delivery, and analytics.
• Clinicians and moderators assigned to support your course, where relevant to safety or your participation.
• Referral partners and organizations (such as a court, agency, employer, or professional referrer) only where you enrolled through them or gave consent to link your record — see the next section.
• Authorities when required by law, valid legal process, or to protect the safety of a person, consistent with our Confidentiality Policy.

If GraceRoot is involved in a merger, acquisition, or transfer of assets, information may be transferred as part of that transaction, subject to this Policy.

If you enroll to satisfy a court order, probation requirement, or agency mandate, we may share your enrollment status, progress, seat time, and certificate of completion with the referring court, probation officer, attorney, or agency that you or the referrer has authorized to receive it. This reporting exists to document your completion for the entity requiring it.

We use cookies and similar technologies to keep you signed in, remember your preferences, secure the Services, and understand aggregate usage. Analytics and marketing pixels may collect general usage data to help us measure and improve the Services. You can control cookies through your browser settings; disabling some cookies may affect functionality such as staying logged in.

We keep personal information for as long as your account is active and as needed to provide the Services. Certain records — such as enrollment, assessment, seat-time, and certificate data tied to court-ordered programs — are retained for a longer period to meet legal, accreditation, and court chain-of-custody requirements. When information is no longer needed, we delete or de-identify it.

We use administrative, technical, and physical safeguards to protect your information, including encryption in transit, hashed passwords, access controls that limit staff access to what is necessary, audit logging of sensitive administrative actions, and regular backups. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. Please help protect your account by using a strong, unique password and keeping it confidential.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you;
• Request correction of inaccurate information;
• Request deletion of your information, subject to legal and court-reporting retention obligations;
• Opt out of non-essential marketing emails (use the unsubscribe link, or contact us);
• Object to or restrict certain processing.

To exercise any of these rights, email support@graceroot.institute. We may need to verify your identity before responding, and we will respond within the time required by applicable law.

The Services are intended for adults. Programs designed for minors are enrolled and consented to by a parent or legal guardian. We do not knowingly collect personal information directly from children under 13 without appropriate consent. If you believe a child has provided information to us improperly, contact us and we will take appropriate steps to remove it.

We may update this Privacy Policy from time to time. When we make material changes, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Services after changes take effect constitutes acceptance of the revised Policy.

Questions or requests about your privacy? Reach us at: