Privacy Policy

Last Updated: October 9, 2025

1. Overview of this Policy

This Privacy Policy (this “Policy”) relates to the personal information that you submit when you access and use Enrollio LLC’s (“Enrollio,” “we,” “us,” or “our”) Website, our studio management platform (the “Platform”), and any products, materials, and services provided by, on, or through the Website (collectively, the “Services”) and other information we automatically collect when you access the Services. This Policy explains all activities regarding your information, including but not limited to how we collect, use, disclose, and secure it and the rights available to you.

You are required to read, understand, and agree to how we process (collection, use, disclosure, security, etc.) your information in this Policy. You are also required to read our Terms of Service and print a copy of each for future reference. All defined terms not defined in this Privacy Policy shall have the meaning subscribed to them in the Terms of Service. By your use of the Services and your submission of the requested personal information, you hereby agree to how we process your information as described in this Policy. If you do not agree, you should not use the Services or submit information.

2. What Information Does Enrollio Collect From You?

2.1 We collect information from and about users of our Services directly from you when you provide it to us and automatically when you use the Services.

2.2We do not collect special categories of personal data such as information relating to or about the below (“sensitive personal information”):

• Social Security Number
• Driver’s License and Passport Numbers
• Account Numbers and credentials
• Precise Geolocation
• Health information
• Credit or criminal records
• Racial or ethnic origin
• Political opinions
• Membership of a political association, professional or trade association
• Membership of a trade union
• Religious beliefs or affiliations
• Philosophical beliefs
• Sexual orientation or practices
• Biometric information
• Contents of mail, email or text messages except for messages sent via the Services

2.3Personal information that you provide to us (“personal information”) when you register on our Services may include your first name, last name, email address, telephone number, and birthdate.

2.4 This information may also include personal information from your customers or prospective customers; your conversations and messages within the Services with your customers or prospective customers; and location data collected by some Enrollio features, including GPS coordinates or other similar information regarding the location of your device.

3. What Does Enrollio Use Information Collected For?

Any information collected by us is for a purpose in relation to your use of our Services, including:

• Provide Services to you: We collect information to enable you to create an account and use the Services, send you email about your registration, perform tasks required to complete a transaction, provide customer support, or provide other types of customer relationship management and fulfillment.
• Fulfilling legal and compliance obligations: We collect information to fulfill our legal obligations. We may also collect information to detect fraud or other suspicious activity.
• To allow communication with you: We collect your email address and phone number to (i) contact you regarding your use of our Services, (ii) respond to your questions, complaints, and queries, and (iii) send you updates regarding our Services or this Policy and other agreements.
• Analytics: We collect information to analyze how visitors interact with our Services, where visitors arrive from and exit to, pages visited, links clicked, text entered and mouse movements to understand site usage, to detect fraud and potential threats and improve our Services.
• Provide technical support: We collect information to optimize or improve our Services and operations, for example, training and quality assurance, data analysis, audits, developing new products, and identifying Services trends.
• For other purposes through your consent: We may collect your information for some other reasons for which your consent will be sought before we process such information.

We may use anonymous information that we collect from you for any legal purpose whatsoever, except where we are required to do otherwise under applicable law. If we combine your information that is not in a personally identifiable form with information that is, we will treat the combined information as your personal information as long as it is combined.

4. Do Third Parties Collect or Use Information?

When you use the Services, certain third parties may use automatic information collection technologies to collect information about you or your device. These third parties may include the service providers below and analytics companies. These third parties may use tracking technologies to collect information about you when you use the Services, which may be associated with your personal information or used to provide you with interest-based (behavioral) advertising or other targeted content. We do not control these third parties’ tracking technologies or how they may be used.

Third-Party Software/Services. We may use third-party software/services to collect and process your personal data. For example:

• Stripe– We use Stripe as a payment processing merchant to receive payment from you during your use of the Services. We do not collect any payment data, including credit cards, but rather it is sent directly to Stripe.
• Twilio– We integrate with Twilio to enable you to seamlessly text with your customers and potential customers. Any messages you send are sent via Twilio.

By using and continuing to use the Services, you agree to all privacy policies and other terms of these third-party software/service companies.

5. How Personal Data Is Collected

5.1 Active Collection

Some of our Services may ask you to submit your personal information in order for you to benefit from the specified features. We collect personal information from you only when you voluntarily submit it to us, such as when you become a user; submit materials through our Services; complete a service request or registration, survey, application or other form; purchase a product or service from us or from one of our vendors, suppliers or other agents; sign up to receive email newsletters or other correspondence; request materials from us; or request email, mail or telephone support or services. You will be informed on what information is required and what information is optional at the time of your submission.

5.2 Passive Collection

As you use our Services, we may passively collect non-personally identifiable information and/or use the following technologies which collect such information on our behalf:

Browser and/or Device Information. Certain information is collected from most browsers, such as your IP address, MAC address, computer type, screen resolution, operating system version, and internet browser type and version. We also may collect information about any mobile device used to access our Services. Your IP address is identified and logged automatically in our server log files whenever a user accesses our Services.

Services Usage Data. When you access our Services, we and our service providers may track and collect application and/or Services usage data, such as the date and time that your devices access our servers and what information and files have been downloaded and/or uploaded to our Services.

Cookies. The Services use cookies (including Flash cookies). A cookie is a small, removable data file that is stored by your web browser or application on your computer and/or device. Cookies allow us to collect various information including browser type, time spent on our Services, features and pages visited, and language preferences. You can choose to have your computer and/or device warn you each time a cookie is being sent, or you can choose to turn off all cookies through your device settings. If you turn cookies off, you will not have access to many features that make your use of our Services more efficient and enjoyable.

Pixel Tags, web beacons, clear GIFs and other similar technologies.We and our service providers may use these technologies in connection with some of our Services (including email messages) to analyze our users’ behavior, track the actions of users of our Services and/or recipients of our emails, and compile statistics about our Services usage and response rates.

6. Sharing Information and Disclosure

We disclose your personal information collected from you through our Services to third parties in the following manner and for the following reasons:

• If you have consented to such disclosures.
• If there are special circumstances, including any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or membership interest (including in connection with a bankruptcy, liquidation or similar proceeding) and related due diligence.
• If the third party is our service provider who provides services to us in connection with our Services including website hosting, data analysis, payment processing, order fulfillment, infrastructure provision, IT services, customer services, email and direct mail delivery services, credit card processing, and auditing services.
• If the party is our affiliate, in which case we are the party responsible for the jointly used personal information.
• Upon request by the government, including the investigatory and enforcement powers of the Federal Trade Commission and other administrative bodies.
• As permitted by applicable law.
• In response to a court order or other legal process.
• When required by law or when we believe in good faith it is required by law.
• To enforce our Privacy Policy, Terms of Service or other agreements and policies applicable to our Services.
• To protect our operations, rights, privacy, safety and/or property.
• To contact, identify or bring legal action against someone who may be causing injury to or interference with our or others’ rights or property; or companies assisting in fraud protection or investigation.

We also may provide aggregated, non-personally identifiable information to third parties for any legal purposes whatsoever.

7. Protecting Your Information

We use commercially reasonable efforts to safeguard and secure your personal information while stored on our computer systems and/or transmitted to or from our computer systems. Regardless of these efforts, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. Any transmission of personal information is at your own risk. If you have reason to believe that your interaction, stored data and/or transmissions to and with us are no longer secure, please immediately notify us at info@enrollio.ai.

Some features of our Services may require you to set up a user ID and password. We recommend that you do not divulge your password to anyone. We will never ask you for your password in an unsolicited telephone call or email. Do not provide your personal or financial information in response to an email request or after clicking on a link from an email. To help protect your computer and personal information, make sure you have current anti-virus and firewall software installed and updated regularly.

8. Children’s Online Privacy

The Services are not intended to be used by anyone under the age of 18. We do not knowingly collect personal information from children under the age of 13 without a parent’s permission. It is your sole obligation to ensure that all information collected about students under 13 has been obtained with parental or guardian written permission. If we are notified that we have received information pertaining to children under the age of 13 without a parent’s permission, as soon as we verify the information, we will immediately obtain parental consent or otherwise delete the information from our servers. To notify us, please email info@enrollio.ai.

9. Cross-Border Transfer

THE SERVICES ARE CONTROLLED AND OPERATED BY US FROM THE UNITED STATES AND ARE NOT INTENDED TO SUBJECT US TO THE LAWS OR JURISDICTION OF ANY STATE, COUNTRY OR TERRITORY OTHER THAN THAT OF THE UNITED STATES. YOUR PERSONAL INFORMATION MAY BE STORED AND PROCESSED IN ANY COUNTRY WHERE WE HAVE FACILITIES OR SERVICE PROVIDERS, AND BY USING THE SERVICES OR BY PROVIDING CONSENT TO US (WHERE REQUIRED BY LAW), YOU AGREE TO THE TRANSFER OF INFORMATION TO COUNTRIES OUTSIDE OF YOUR COUNTRY OF RESIDENCE, INCLUDING THE UNITED STATES. When using or disclosing personal information transferred from the European Union, we use standard contractual clauses approved by the European Commission, adopt other means under European Union law for ensuring adequate safeguards, or obtain your consent.

10. California Privacy Rights

If you are a resident of the State of California, you may exercise the rights described below. By choosing to exercise your rights, you are declaring that you are a California resident as defined in the California Consumer Privacy Act of 2018, Civil Code Section 1798.100 (“CCPA”).

Disclosure of Personal Information We Collect About You

You have the right to know, and request disclosure of:

• The categories of personal information we have collected about you, including sensitive personal information
• The categories of sources from which the personal information is collected
• The categories of third parties to whom we disclose personal information, if any
• The specific pieces of personal information we have collected about you

Disclosure of Personal Information Sold, Shared, or Disclosed for a Business Purpose

While we are required to provide this notice, we do not sell any personal information. You have the right to opt-out of the sale of your personal information or sharing of your personal information for the purpose of targeted behavioral advertising. To opt-out of the sale or sharing of your personal information, email info@enrollio.ai.

Right to Limit Use of Sensitive Personal Information

You have the right to limit the use and disclosure of your sensitive personal information to the use which is necessary to perform the Services or provide the goods reasonably expected by an average consumer. To limit the use of your sensitive personal information, please email info@enrollio.ai.

Right to Deletion

Subject to certain exceptions, on receipt of a verifiable request from you, we will delete your personal information from our records and direct third parties to whom we have sold or shared your personal information to delete it unless this proves impossible or involves disproportionate effort.

Right of Correction

If we maintain inaccurate personal information about you, you have the right to request us to correct that inaccurate personal information. Upon receipt of a verifiable request, we will use commercially reasonable efforts to correct it.

Protection Against Retaliation

You have the right to not be retaliated against by us because you exercised any of your rights under the CCPA/CPRA. To exercise one of these rights, please email info@enrollio.ai and include your name and email address. You can also submit a complaint to the California Office of the Attorney General. For more information, visit oag.ca.gov/privacy/ccpa.

11. GDPR / United Kingdom Privacy Rights

If you are a resident of the European Union or the United Kingdom, you may exercise the following rights:

• Right to Be Informed– to know or be notified about the collection and use of your personal information.
• Right to Access– to be provided with a copy of your personal information.
• Right to Rectification– to require us to correct any mistakes in your personal information.
• Right to be Forgotten– to require us to delete your personal information in certain situations.
• Right to Restriction of Processing– to require us to restrict processing in certain circumstances.
• Right to Data Portability– to receive the personal information you provided in a structured, commonly used, and machine-readable format.
• Right to Object– to object to processing for direct marketing and, in certain situations, to our continued processing of your personal information.
• Right Not to be Subject to Automated Individual Decision-Making– not to be subject to a decision based solely on automated processing that produces legal effects concerning you.

To exercise one of these rights, please email info@enrollio.ai with your name and email address. The General Data Protection Regulation also gives you the right to lodge a complaint with a supervisory authority in the European Union (or European Economic Area) state where you work, normally live, or where any alleged infringement of data protection laws occurred.

12. Canadian Privacy Rights

If you are a resident of Canada, you may exercise the Right to Be Informed, Right to Access, Right of Correction, and Right of Deletion (in certain situations). To exercise one of these rights, please email info@enrollio.ai with your name and email address. The Personal Information Protection and Electronic Documents Act also gives you the right to lodge a complaint with the Privacy Commissioner.

13. New Zealand Privacy Rights

If you are a resident of New Zealand, under the Privacy Act 2020 you have the Right to Be Informed, Right to Access, Right of Correction, Right of Deletion (in certain situations), Right to Data Portability, and Right to Object. To exercise one of these rights, please email info@enrollio.ai with your name and email address. The Privacy Act 2020 also gives you the right to lodge a complaint with the Privacy Commissioner.

14. Your Rights With Respect to Personal Data

• You can review and change your personal information by logging into the Services and visiting your account settings page.
• You may also send us an email at info@enrollio.ai to request access to, correct, or delete any personal information free of charge that you have provided to us. We cannot delete your personal information except by also deleting your user account.
• We will respond to a request to access, correct, or delete any data within 30 days of the date we receive the request.
• We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.
• If we refuse to amend, correct, or delete your personal information, we will set out our reasons and provide you with details of how you may complain about our refusal.

15. How Long Personal Data Is Kept

We will only retain personal data for as long as is reasonably necessary. Upon deletion of an account, all personal data will be removed as soon as possible, and always within 90 days of the deletion.

16. Do Not Track Disclosure

Third parties such as advertising networks, analytics providers, and widget providers may collect information about your online activities over time and across different websites when you access or use our Services.

17. Changes to Our Privacy Policy

It is our policy to post any changes we make to our privacy policy on this page with a notice that the privacy policy has been updated on the Services home page. If we make material changes to how we treat our users’ personal information, we will notify you by email to the primary email address specified in your account and/or through a notice on the Services home page. Please take a look at the “Last Updated” legend above to see when this Privacy Policy was last revised. You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically visiting our website and this privacy policy to check for any changes.

18. Contact Us With Questions and Feedback

We welcome your questions, comments, and concerns about this Privacy Policy and our privacy practices. Please email us at info@enrollio.ai.