Privacy Policy

Introduction

Welcome to Enrolly. We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our tutor management platform.

Enrolly is fully compliant with Singapore's Personal Data Protection Act 2012 (PDPA). We take data protection seriously and implement bank-level encryption and security measures to protect your information.

By using Enrolly, you agree to the collection and use of information in accordance with this Privacy Policy.

Information We Collect

Account Information

When you create an Enrolly account, we collect:

• Email address
• Password (encrypted and securely stored)
• Profile information (name, contact details, teaching specialisation)

Student and Operational Data

To provide our tutor management services, we collect and store:

• Student names and contact information
• Parent and guardian contact details
• Lesson schedules and attendance records
• Academic progress notes and records
• Payment history and invoice records
• Digital signatures on policies and agreements
• Communication logs with parents and students

Payment Information

Payment information is processed securely through our third-party payment processors:

• Razorpay: Handles subscription billing via credit card
• HitPay: Processes in-app invoice payments via credit card and PayNow

We do not directly store your full credit card details. Payment processors handle sensitive payment information according to PCI-DSS standards.

Analytics and Usage Data

We use Google Analytics to understand how users interact with our platform:

• Page views and navigation patterns
• Feature usage statistics
• Device information (browser type, operating system)
• IP address and general location data
• Session duration and engagement metrics

How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To provide core platform functionality including scheduling, student management, and invoicing
• Payment Processing: To process subscription payments and invoice transactions
• Communication: To send lesson reminders, payment notifications, and important platform updates
• Customer Support: To respond to your inquiries and provide technical assistance
• Platform Improvement: To analyse usage patterns and improve features and user experience
• Security: To detect and prevent fraud, abuse, and security incidents
• Legal Compliance: To comply with applicable laws and regulations

Data Storage and Security

Storage Location

All user data is stored on secure, Singapore-based servers. This ensures compliance with Singapore's data protection laws and provides you with faster access to your data.

Security Measures

We implement industry-standard security measures to protect your data:

• Bank-level encryption for data transmission and storage
• Secure password hashing and authentication
• Regular security audits and updates
• Access controls and monitoring systems
• Encrypted backups and disaster recovery procedures

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but maintain commercially reasonable safeguards.

Third-Party Services

Enrolly integrates with the following third-party services:

Data Sharing and Disclosure

Parent Portal Access

The Parent Portal feature allows tutors to share specific student information with parents and guardians. You, as the tutor, control what information is shared through the Parent Portal. We do not share student data with parents without your explicit configuration.

We Do Not Sell Your Data

We do not sell, rent, or trade your personal information or student data to third parties for marketing purposes.

Legal Disclosures

We may disclose your information if required to do so by law or in response to:

• Valid legal processes (court orders, subpoenas)
• Government or regulatory requests
• Protection of our rights, property, or safety
• Enforcement of our Terms of Service

Data Retention and Deletion

Active Accounts

We retain your account data and student information for as long as your account remains active and as necessary to provide our services.

Account Deletion

When you delete your Enrolly account, we will permanently delete your personal data and student information within 30 days, except where we are required to retain certain data for legal or regulatory compliance.

Financial Records

Financial and transaction records may be retained for up to 7 years as required by Singapore tax and accounting regulations, even after account deletion.

Your Rights Under PDPA

Under Singapore's Personal Data Protection Act (PDPA), you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Correction: Request corrections to inaccurate or incomplete data
• Right to Withdraw Consent: Withdraw your consent for data collection and processing (subject to contractual obligations)
• Right to Data Portability: Export your data in a commonly used format
• Right to Deletion: Request deletion of your personal data (subject to legal retention requirements)

To exercise any of these rights, please contact us at shaowen@enrolly.co. We will respond to your request within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore.

Cookies and Tracking Technologies

Types of Cookies We Use

Enrolly uses the following types of cookies:

• Essential Cookies: Required for authentication and platform functionality
• Analytics Cookies: Google Analytics cookies to understand user behavior and improve our service

Managing Cookies

You can control and manage cookies through your browser settings. Note that disabling essential cookies may affect your ability to use certain features of Enrolly.

To opt out of Google Analytics tracking, you can install the Google Analytics Opt-out Browser Add-on.

Children's Data and Student Information

Enrolly is designed for use by tutors and educators. The platform may store information about students, including minors under the age of 18.

Tutor Responsibilities:

• Tutors are responsible for obtaining appropriate consent from parents or guardians before entering student data into Enrolly
• Tutors must ensure the accuracy and appropriateness of student information entered into the platform
• Tutors must comply with all applicable laws regarding the collection and use of children's personal data

If you are a parent or guardian and have concerns about your child's data being stored in Enrolly, please contact the tutor directly or reach out to us at shaowen@enrolly.co.

International Data Transfers

Your data is primarily stored on servers located in Singapore. However, some of our third-party service providers (such as Google Analytics, Razorpay, and HitPay) may process or store data in other countries.

When data is transferred internationally, we ensure that appropriate safeguards are in place and that third-party providers comply with applicable data protection standards.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

When we make material changes to this Privacy Policy, we will notify you by:

• Email notification to your registered email address
• Prominent notice on the Enrolly platform
• Updating the "Last Updated" date at the top of this page

Your continued use of Enrolly after the effective date of the updated Privacy Policy constitutes your acceptance of the changes.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For data protection concerns or complaints, you may also contact the Personal Data Protection Commission (PDPC) of Singapore at www.pdpc.gov.sg.