What this site keeps

What we store

• Your account: your name, work email address, role (rep, trainer or manager), when you joined and last used the site, and whether you have confirmed your email. Your password is never stored; only a salted PBKDF2 hash of it is.
• Your progress: lessons read, quiz and drill scores, which quiz questions you got right or wrong (for the five-minute review), role-plays you marked as run, and your capstone draft, checklist and practice scorecard.
• Sign-offs and grades: the mock-meeting scorecard and the written-capstone grade a manager or trainer records for you, with any note they write, their name and the date.
• Start date: the date your four weeks begin, if a manager sets one, used to show what is due each week.
• Added reps: the email address a manager adds so a new rep can sign up, and who added it.
• Activity log: role changes, password resets by a manager, sign-offs, added reps, data exports and demo sign-ins, with who did it and when. Demo sign-ins also record the network address they came from.
• Security records: a hashed token for each signed-in session, counts of failed sign-ins per email address, and short-lived counts of requests per network address, used to stop password guessing.

Who can see it

You see your own account and progress. Managers and trainers see every rep's progress on the team page: scores, drills, role-plays, capstone word counts and dates, and sign-offs. Managers can also see the activity log and download a full export, which includes saved progress and capstone drafts, as the site's backup. The leadership demo account sees the course only; it cannot see anyone's data. Anyone holding one of your certificate ids can confirm it on the certificate check page, which shows only what the certificate itself shows: your name, the track, who signed it off and the date.

Cookies and browser storage

The site sets one cookie, pl_session, which keeps you signed in for up to 30 days (7 for the demo). It is HttpOnly and sent only to this site over HTTPS. Your progress is also kept in your browser's local storage so the course works without a connection; signing in syncs it to your account, and signing out clears it from the browser. There are no advertising or tracking cookies.

Services the site uses

• Cloudflare hosts the site and stores the data above. Cloudflare Web Analytics counts page views without cookies.
• Google Fonts serves the typefaces, so your browser requests font files from Google.
• Pwned Passwords (Have I Been Pwned) checks new passwords against known data breaches. Only the first five characters of a one-way hash of the password are sent, never the password itself.
• Cloudflare Email Sending sends password-reset and email-confirmation messages to your address, from no-reply@peopleloop.tech.

How long it is kept

Account and progress data stay while your account exists. Password-reset links expire after one hour, email-confirmation links after seven days, and an added rep's sign-up window after seven days. Request counts are deleted after an hour, and the activity log keeps its most recent 5,000 entries. To have an account and its progress deleted, write to the address below.

About this training site

Who runs it

This course site, peopleloop.tech, is run by PeopleLoop's sales team. PeopleLoop is a division of Sequoia, and the company's public website is peopleloop.com.

What is here

Two four-week tracks, one for broker reps and one for PEO reps. Each has ten modules of short written lessons, narrated explainers, key terms, a twelve-question quiz, practice drills and optional role-plays, and closes with a written capstone and a mock client meeting that a manager scores and signs off.

The material is for training only. It is not advice to any company, and figures are checked against current carrier and IRS guidance before a rep quotes them.

Who can use it

Accounts are for PeopleLoop employees. A manager adds each new rep, or reps sign up with a PeopleLoop email address and the team's invite code. There is nothing to buy and nothing for the public to sign up for. Leadership can preview the course with a demo code.

How it is built

The site runs on Cloudflare, over HTTPS only. It loads no advertising or third-party tracking scripts. Passwords are stored as salted hashes, sessions use a secure cookie, and every page is served with a strict content security policy.

Contact

Questions or requests about your data: ryan.davidson@peopleloop.com. More about PeopleLoop is on the about page.