Enrolli Privacy Policy

1. Who This Policy Covers

This Privacy Policy covers all users of the Enrolli platform, including:

• Parents and legal guardians who create and manage Enrolli accounts
• Students linked to parent accounts (ages 13 through 17)
• School counselors with institutional accounts

Enrolli does not permit children under 13 to use the platform. If we become aware that we have collected data from a child under 13 without verifiable parental consent, we will delete that data promptly.

2. Information We Collect

2.1 Information You Provide Directly

• Parent / guardian name, email address, and billing information
• Student name, grade year, and date of birth
• Student high school name and location
• Student self-reported GPA and test scores (not verified by Enrolli)
• Student financial preferences and expectations
• Parent Assessment responses
• Student Matching Quiz responses

2.2 Information Collected Automatically

• Behavioral data: time spent on college profile pages, visit frequency, and colleges saved to favorites or active lists
• Platform usage data: session duration, features accessed, subscription tier
• Device and browser information: IP address, browser type, operating system

2.3 Information We Do Not Collect

• Official transcripts or school-issued academic records
• Official test score reports from College Board, ACT, or any testing organization
• Social Security numbers or government identification numbers
• Payment card numbers (handled exclusively by Stripe)

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Enrolli platform and all subscription features
• Power the College Connection feature for users who have affirmatively opted in
• Generate personality-based college matching results
• Track student progress through gamified checklists
• Communicate with you about your account, subscription, and platform updates
• Comply with applicable federal and state law
• Detect fraud, protect security, and enforce our Terms of Service

4. How We Share Your Information

4.1 College Connection — Data Sharing with College Partners

If you have affirmatively opted in to College Connection, we may share your student's data with accredited college and university admissions offices that have entered into a signed College Data Agreement with Enrolli. The data categories shared are described in Section 5 of our Parent & Guardian Terms of Service. Only colleges with a valid, signed agreement may receive data.

Enrolli does not share student data with unaccredited institutions, for-profit recruiting firms, or any organization unrelated to your student's college search.

4.2 Service Providers

We share data with third-party service providers who assist us in operating the platform, including payment processing (Stripe), platform hosting, and email communication. These providers are contractually prohibited from using your data for any purpose other than providing services to Enrolli.

4.3 Legal Requirements

We may disclose information when required by law, subpoena, court order, or government request, or when we believe disclosure is necessary to protect the rights, property, or safety of Enrolli, our users, or the public.

4.4 Business Transfers

If Enrolli is acquired, merged, or sells substantially all of its assets, user data may be transferred as part of that transaction. We will notify users of any such transfer and provide an opportunity to delete their data.

5. Children's Privacy — COPPA Compliance

Enrolli complies with the Children's Online Privacy Protection Act (COPPA), 15 U.S.C. § 6501 et seq. We do not knowingly collect personal information from children under 13. All accounts for students ages 13 through 15 require verifiable parental consent. For students ages 13 through 15, participation in College Connection requires a separate, affirmative parental consent step beyond general Terms of Service agreement.

Parents may review, request correction of, or request deletion of their child's information at any time by contacting us at hello@myenrolli.com.

6. Indiana Consumer Data Protection Act (Indiana CDPA)

Enrolli is subject to the Indiana Consumer Data Protection Act, Indiana Code § 24-15 et seq., which took effect January 1, 2026. Under the Indiana CDPA, Indiana residents have the following rights:

• Right to know: You may request confirmation of whether we process your personal data and access to that data.
• Right to correct: You may request correction of inaccurate personal data.
• Right to delete: You may request deletion of personal data we hold about you, subject to legal limitations.
• Right to data portability: You may request a copy of your personal data in a portable format.
• Right to opt out of sale: You may opt out of the sale of your personal data to third parties, including college partners, at any time through the College Connection opt-out process or by contacting us directly.
• Right to non-discrimination: We will not discriminate against you for exercising any of these rights.

To exercise any of these rights, submit a request to hello@myenrolli.com. We will respond within the timeframes required by applicable law. We may need to verify your identity before processing certain requests.

If we deny a rights request, you may appeal by submitting a written appeal to hello@myenrolli.com. If your appeal is denied, you may contact the Indiana Attorney General's office.

7. Data Retention

We retain personal data for as long as your account is active or as needed to provide services. Upon account deletion:

• Personal data is deleted or anonymized within 90 days of account deletion, except as required by law.
• Data already transmitted to college partners through College Connection is not retrievable by Enrolli and is subject to each college's own data retention policies.
• Aggregated, anonymized usage data may be retained indefinitely for platform improvement purposes.

8. Data Security

We implement reasonable and appropriate technical and organizational security measures to protect the personal data we hold. However, no data transmission or storage system is completely secure. We cannot guarantee that unauthorized third parties will never be able to defeat our security measures.

In the event of a data breach that affects your personal information, we will notify affected users in accordance with applicable law.

9. Cookies and Tracking

Enrolli uses cookies and similar tracking technologies to operate the platform, maintain sessions, and analyze usage. We use only essential and functional cookies necessary for the platform to work. We do not use advertising or third-party tracking cookies.

10. Third-Party Links

The Enrolli platform may contain links to third-party websites, including college websites and external resources. This Privacy Policy does not apply to those third-party sites. We are not responsible for the privacy practices of any third party.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email and by posting a notice on the platform with at least 30 days' advance notice before material changes take effect. Your continued use of the platform after the effective date of changes constitutes acceptance of the updated Policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at: