Privacy Policy

Enrollio, LLC ("Enrollio," "we," "us," or "our") operates the Enrollio Pulse application (the "App"), a studio performance dashboard available at enrolliopulse.vercel.app. This Privacy Policy explains what information we collect, how we use it, and your choices regarding your data.

We collect the following categories of information when you use the App:

• Account & CRM Data — Sub-account identifiers and configuration settings provided through GoHighLevel (GHL) and your Enrollio account, including location IDs and integration preferences.
• Facebook Ads Data — When you connect your Facebook account, we access ad campaign performance metrics (spend, impressions, clicks, leads, cost-per-lead) through the Facebook Marketing API. We do not access your personal Facebook profile, friends list, or private messages.
• Google Analytics & Google Ads Data — Website traffic metrics and advertising performance data from your connected Google accounts.
• Google Search Console Data — Search performance metrics for connected properties.
• Email & Communication Metrics — Aggregate email deliverability and engagement data from Mailgun.
• Usage Data — Standard analytics collected by Vercel Analytics (page views, referrers, device type). No personally identifiable information is collected through analytics.

• Display marketing and enrollment performance dashboards to you.
• Calculate key metrics such as cost-per-lead, response times, and conversion rates.
• Provide integration status and connectivity health checks.
• Improve and maintain the App's functionality and reliability.

Enrollio Pulse uses the Facebook Marketing API to retrieve advertising performance data on your behalf. Specifically:

• We request only the ads_read and ads_management permissions necessary to display your ad performance data.
• Facebook data is used solely to render your marketing dashboard within the App.
• We do not sell, license, or share your Facebook data with any third parties.
• We do not use Facebook data for purposes unrelated to providing and improving the App.
• Facebook data is stored in encrypted databases and is retained only as long as your account is active. You may request deletion at any time (see Section 8).
• If you disconnect your Facebook integration, we delete the cached Facebook data associated with your account within 30 days.

We do not sell your personal data. We may share information only in the following circumstances:

• Service Providers — We use Vercel (hosting), Supabase (database), and GoHighLevel (CRM) as part of the Enrollio platform to operate the App. These providers access data only as needed to deliver their services and are bound by their own privacy policies.
• Legal Requirements — We may disclose information if required by law, regulation, legal process, or governmental request.
• Business Transfers — In connection with a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction.

We implement industry-standard security measures including encryption in transit (TLS), encrypted database storage, and access controls. API tokens and credentials are stored as encrypted environment variables and are never exposed to client-side code.

We retain your data for as long as your account is active or as needed to provide the App's services. Cached advertising and analytics data is refreshed periodically and older snapshots are automatically purged. If you close your account or request deletion, we will remove your data within 30 days, except where retention is required by law.

You have the right to:

• Access your data — request a copy of the data we hold about you.
• Delete your data — request that we erase your data from our systems.
• Disconnectintegrations — revoke any connected third-party account (Facebook, Google, Mailgun) at any time through the App's settings page, or by revoking access directly in the respective platform's settings.

To exercise any of these rights, contact us at support@enrollio.com. We will respond within 30 days.

The App is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: