This Privacy Policy explains how Enrollsy, Inc. (“Enrollsy,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use Community, the local marketplace owned and operated by Enrollsy.
We’ve tried to write this in plain English. If anything is unclear, email us at support@enrollsy.com — we’re happy to explain.
1. The Quick Version
- We don’t sell your personal information. Period.
- We don’t share your data with advertisers.
- When you submit a lead through a listing, your information goes to that business (the Subscriber). That’s the whole point.
- We use cookies and analytics to improve Community. You can opt out.
- You have rights over your data — including the right to see it, correct it, or delete it.
The rest of this document is the detailed version.
2. Who This Policy Applies To
Community has two main types of users:
- Consumers — people browsing for classes, programs, camps, workshops, and activities, and submitting inquiries to Subscribers
- Subscribers — businesses, schools, instructors, and program operators who claim and manage listings, with or without a paid subscription
This Privacy Policy applies to both. Some sections apply only to Subscribers — those are clearly marked.
Community is owned and operated by Enrollsy, Inc., a Delaware corporation headquartered in Utah. Enrollsy is the data controller for personal information collected through Community.
Enrollsy, Inc.
Email: support@enrollsy.com
3. Information We Collect
3.1 Information You Give Us
As a Consumer submitting a lead through a listing:
- Your name
- Email address
- Phone number (optional)
- Your message and inquiry type
- The age of the child you’re inquiring on behalf of (optional, where relevant to the program)
- Preferred contact method
As a Subscriber creating an account:
- Full name
- Email address
- Phone number
- Business name and your role at the business
- Password (stored in encrypted form — we never see your actual password)
- Listing details you provide: address, hours, photos, descriptions, age ranges, and so on
- Payment information processed through Stripe (we receive a Stripe customer ID and metadata; we don’t see your full card number)
As a visitor to our Contact form or other forms:
- Whatever you submit (typically name, email, message)
3.2 Information We Collect Automatically
When you use Community, we collect:
- Device and browser information: browser type, operating system, device type, screen size
- Usage information: pages you visit, links you click, time spent on pages, referring URL
- IP address and approximate location: used for analytics, security, distance-based search, and spam detection
- Cookies and similar technologies: see Section 8
3.3 Information from Third Parties
- Stripe (payment processor): subscription status, payment success/failure events, invoice history
- Google Maps and Google Places API: when you search by location, your search query and approximate location are sent to Google to return relevant results
- Google reCAPTCHA: an anti-bot score is generated for each lead form submission
- Email delivery providers: delivery and bounce information when we send transactional emails
- Analytics providers: aggregated usage data
4. How We Use Your Information
We use the information we collect to:
- Operate Community: show you listings, return search results, route leads to Subscribers, manage subscriber accounts, and process payments
- Communicate with you: send transactional emails (lead confirmations, subscription receipts, password resets), respond to support inquiries, and notify Subscribers of new leads
- Protect Community and our users: detect and prevent fraud, spam, abuse, and unauthorized access (this includes analyzing IP addresses, user agents, reCAPTCHA scores, and lead submission patterns)
- Improve Community: understand how people use the marketplace, fix bugs, and develop new features
- Comply with the law: meet our legal, accounting, and regulatory obligations
- Send marketing emails to Subscribers about new Community features, tips for getting more leads, and occasional Enrollsy product updates — only when permitted, and you can unsubscribe anytime
We don’t use information you submit through a lead form for any purpose other than routing it to the Subscriber and the operational/safety functions above. We don’t use lead content to send you marketing.
5. How We Share Information
5.1 With Subscribers (when you submit a lead)
When you, as a Consumer, submit an inquiry through a listing, the Subscriber whose listing you contacted receives your information so they can respond to you. That’s the core function of Community.
Once your information is in the Subscriber’s hands, the Subscriber becomes an independent data controller for that information. Their use of your data is governed by their own privacy practices, not ours. We encourage you to evaluate Subscribers before submitting a lead.
5.2 With Service Providers
We share information with vendors who help us run Community, under contract and only for the purposes described in this Policy:
- Stripe — payment processing
- Google — Maps, Places, reCAPTCHA, and Analytics
- Email delivery providers — sending transactional and notification emails
- Cloud hosting and database providers — storing and serving the application
- Customer support tools — handling support requests
- Base44 — the platform on which Community is built
5.3 For Legal Reasons
We may share information when required by law, valid legal process (subpoena, court order, government request), or to:
- Enforce our Terms of Service
- Protect our rights, property, or safety
- Protect the rights, property, or safety of our users or the public
- Detect, prevent, or address fraud, security, or technical issues
5.4 With a Successor
If Enrollsy is involved in a merger, acquisition, or sale of all or part of its assets, your information may be transferred to the successor entity. We’ll notify you (typically by email) before your information is transferred and becomes subject to a different privacy policy.
5.5 What We Don’t Do
- We don’t sell your personal information.
- We don’t share your information with advertisers for advertising purposes.
- We don’t share your information with anyone for purposes outside what’s described in this Policy without your consent.
6. How Long We Keep Your Information
We keep personal information only as long as we need to for the purposes described in this Policy, or as required by law. Specifically:
- Lead submissions: retained for up to 24 months after submission, then deleted or anonymized (Subscribers may retain leads in their own systems separately)
- Subscriber account information: retained while your account is active and for up to 7 years after closure for tax, legal, and accounting purposes
- Payment information: retained per Stripe’s policies and applicable law
- Anonymized and aggregated data: may be retained indefinitely for analytics and product improvement
7. Your Rights and Choices
7.1 General Rights
Regardless of where you live, you can:
- Access the information we have about you by emailing support@enrollsy.com
- Correct inaccurate information (Subscribers can do this directly in their dashboard)
- Delete your account and associated information (some information may be retained as described in Section 6)
- Unsubscribe from marketing emails by clicking the unsubscribe link in any marketing email or emailing support@enrollsy.com
- Opt out of analytics cookies through our cookie banner
We’ll respond to verifiable requests within 30 days (or longer if required by law, in which case we’ll let you know).
7.2 California Residents (CCPA / CPRA)
If you’re a California resident, you have additional rights under the California Consumer Privacy Act and California Privacy Rights Act:
- Right to know what personal information we’ve collected about you, where we got it, why we have it, and who we’ve shared it with
- Right to delete personal information, subject to certain exceptions
- Right to correct inaccurate personal information
- Right to opt out of the sale or sharing of your personal information — we don’t sell or share personal information for cross-context behavioral advertising, so there’s nothing to opt out of, but you have this right
- Right to limit the use of sensitive personal information — we don’t use sensitive personal information beyond what’s necessary to provide Community
- Right to non-discrimination for exercising these rights
To exercise any of these rights, email support@enrollsy.com from the email address associated with your account, or include enough information for us to verify your identity. You may also designate an authorized agent to act on your behalf.
Categories of personal information we collect (per CCPA): identifiers (name, email, phone, IP address), commercial information (subscription history), internet activity (browsing on Community), geolocation (approximate, from IP and search), and inference data (preferences derived from search behavior).
Categories of personal information we disclose for business purposes: identifiers and inquiry contents are disclosed to Subscribers when you submit a lead. Identifiers and commercial information are disclosed to Stripe for payment processing.
7.3 Users Outside the United States
Community is operated from the United States and is intended for users in the US. If you access Community from outside the US, your information will be transferred to and processed in the US, which may have different data protection laws than your country. By using Community, you consent to this transfer.
7.4 Children’s Privacy (COPPA)
Community is not intended for children under 13 to use directly.
We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided personal information to Community, please email us at support@enrollsy.com and we will delete it.
When parents submit lead inquiries on behalf of their children — for example, asking about a music class or summer camp — we may collect basic information about the child, such as age. This information is provided by the parent, is used only to route the inquiry to the Subscriber, and is treated with extra care:
- We collect only what’s necessary
- We don’t display this information publicly
- We don’t use it for marketing or profiling
- We delete it on request from the parent
Subscribers who run programs for children are independently responsible for complying with COPPA and other child privacy laws when they collect information from or about children through their own systems after a lead is received.
8. Cookies and Similar Technologies
8.1 What We Use
Community uses cookies and similar technologies for:
- Strictly necessary cookies: session management, authentication, security, fraud prevention. These cannot be disabled.
- Functional cookies: remembering your preferences (e.g., search location, cookie preferences)
- Analytics cookies: Google Analytics 4 — measures how people use Community in aggregate. This can be disabled via our cookie banner.
We do not use advertising cookies or third-party cookies for cross-site tracking.
8.2 Your Choices
When you first visit Community, you’ll see a cookie banner with options to accept or customize. You can change your cookie preferences anytime by clicking “Cookie Preferences” in the footer.
You can also block or delete cookies in your browser settings, but some parts of Community may not work properly without strictly necessary cookies.
8.3 Do Not Track
Some browsers offer a “Do Not Track” signal. Because there’s no industry-wide standard for how to respond to it, Community currently doesn’t change its behavior based on this signal. We treat all users the same way regardless: we don’t track you across other sites, and we don’t sell or share your data.
9. Security
We take security seriously. We use technical and organizational measures to protect your information, including:
- HTTPS encryption in transit
- Encrypted password storage
- Access controls and least-privilege permissions for employees
- Regular security reviews and updates
- Vendor due diligence
That said, no system is 100% secure. If you suspect a security issue, please report it to support@enrollsy.com and we’ll respond promptly.
10. Third-Party Links
Community may contain links to third-party sites — including Subscribers’ own websites, social media accounts, and payment processors. We’re not responsible for the privacy practices of those third parties. Read their privacy policies before sharing information with them.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we’ll update the “Last updated” date at the top of this page. For material changes, we’ll provide additional notice (such as an email to Subscribers, or a banner on Community) before the change takes effect.
Your continued use of Community after the effective date of the updated Policy means you accept the changes. If you don’t agree, please stop using Community and contact us to delete your information.
12. Contact Us
Questions, concerns, or requests about your privacy?
Enrollsy, Inc.
Attn: Privacy Team
Email: support@enrollsy.com
Community is owned and operated by Enrollsy, Inc.