Privacy Policy

Last updated: September 9, 2026

Klozur LLC ("Klozur," "we," "us") provides an admissions-AI service that replies to inbound SMS inquiries on behalf of our school and agency customers. This policy explains what personal information we collect, how we use it, and the choices you have.

1. Who this policy applies to

This policy covers three kinds of people:

2. Information we collect

From prospective students: phone number, first and last name, email address (if provided), SMS message content, call attributes (time, duration), tags our AI applies during qualification, and opt-out status. This data is provided by the school's Apten account and delivered to Klozur via webhooks.

From customer users: username, password (stored as a SHA-256 hash), role, school assignment, and audit log of actions you take in the dashboard.

From website visitors: any information you submit via our contact form (name, work email, school/company, phone, and the free-text description you provide), plus your consent choices for telephone calls and SMS text messages. When you check a consent box we record which box you checked, the date and time, your IP address, and the page where you submitted the form, so we can document your consent.

3. How we use it

4. How we share it

We do not sell personal information. We share data with limited sub-processors to operate the service:

We may disclose information if required by subpoena, court order, or applicable law, or to protect the rights, property, or safety of Klozur, our customers, or the public.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

5. Retention

Conversation data and lead records are retained for up to 24 months after the end of a school's subscription unless a shorter period is agreed in the customer contract, or deletion is requested under Section 7.

Website contact-form submissions are retained for up to 24 months for lead-follow-up purposes.

6. SMS, TCPA, and consent

Klozur processes SMS messages on behalf of our school customers. Each school is responsible for obtaining and documenting consent from each student before sending promotional SMS, in accordance with the Telephone Consumer Protection Act (TCPA) and comparable state laws. Klozur honors opt-out requests (STOP, UNSUBSCRIBE, QUIT, END, CANCEL, stop texting) delivered through the platform and forwards opt-out state to the originating Apten account.

Texts and calls from Klozur to website visitors. If you check the SMS consent box on the klozur.ai contact form, Klozur LLC may send you SMS text messages at the number you provided to schedule your demo, follow up on your inquiry, and share information about Klozur's products and services. Checking the box is optional and is not a condition of purchase or of receiving a demo or any service. Message frequency varies. Message and data rates may apply. Reply STOP at any time to opt out, or HELP for help. If you check the separate call consent box, Klozur may call you at that number about the same topics, including with automated technology; that box is also optional. Your SMS opt-in data and consent will not be shared with any third parties or affiliates for marketing or promotional purposes. Our Terms of Service describe the messaging program in more detail.

7. Your rights and choices

If you are a prospective student and want your data removed from Klozur's systems, you have two options:

Residents of California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and other U.S. states with consumer privacy laws have additional rights including access, correction, portability, and the right to appeal a denied request. Email the address above to exercise these rights.

EU/UK residents may exercise rights under GDPR including erasure, rectification, and portability through the same address.

8. Security

Data is encrypted in transit (TLS 1.2+). Passwords are stored as salted hashes. Apten API keys, Stripe secrets, and other credentials are held in server-side environment variables, never in client-side code. Access to production systems is restricted to Klozur partners. See our Terms of Service for additional security commitments.

9. Children's privacy

Klozur is a B2B service for education institutions and is not directed at children under 13. We do not knowingly collect information from children under 13. If you believe a child's information has been submitted, contact us and we will remove it.

10. Changes to this policy

We may update this policy from time to time. Material changes will be posted here with an updated "Last updated" date. Continued use of the service after an update constitutes acceptance of the revised policy.

11. Contact

Questions or requests: privacy@klozur.ai
Klozur LLC, Pennsylvania, United States