Privacy Policy

Last updated: April 24, 2026

Klozur LLC ("Klozur," "we," "us") provides an admissions-AI service that replies to inbound SMS inquiries on behalf of our school and agency customers. This policy explains what personal information we collect, how we use it, and the choices you have.

1. Who this policy applies to

This policy covers three kinds of people:

• Prospective students (end-users): anyone who texts a phone number managed by a Klozur customer school.
• Customer users: employees of schools or agencies who log into the Klozur dashboard.
• Website visitors: anyone browsing klozur.ai.

2. Information we collect

From prospective students: phone number, first and last name, email address (if provided), SMS message content, call attributes (time, duration), tags our AI applies during qualification, and opt-out status. This data is provided by the school's Apten account and delivered to Klozur via webhooks.

From customer users: username, password (stored as a SHA-256 hash), role, school assignment, and audit log of actions you take in the dashboard.

From website visitors: any information you submit via our contact form (name, work email, school/company, phone, and the free-text description you provide).

3. How we use it

• Deliver the admissions-AI service (reply to texts, qualify leads, book calls).
• Provide our customers with conversation history, usage metrics, and scheduled-call calendars.
• Operate billing and process lead-credit purchases.
• Respond to inquiries submitted through klozur.ai.
• Investigate abuse, enforce our Terms, comply with law.

4. How we share it

We do not sell personal information. We share data with limited sub-processors to operate the service:

• Apten — the AI SMS platform that powers our customer schools' conversations.
• Stripe — payment processing for lead-credit purchases.
• Resend — transactional email delivery (lead notifications, receipts).
• DigitalOcean — infrastructure hosting.

We may disclose information if required by subpoena, court order, or applicable law, or to protect the rights, property, or safety of Klozur, our customers, or the public.

5. Retention

Conversation data and lead records are retained for up to 24 months after the end of a school's subscription unless a shorter period is agreed in the customer contract, or deletion is requested under Section 7.

Website contact-form submissions are retained for up to 24 months for lead-follow-up purposes.

6. SMS, TCPA, and consent

Klozur processes SMS messages on behalf of our school customers. Each school is responsible for obtaining and documenting consent from each student before sending promotional SMS, in accordance with the Telephone Consumer Protection Act (TCPA) and comparable state laws. Klozur honors opt-out requests (STOP, UNSUBSCRIBE, QUIT, END, CANCEL, stop texting) delivered through the platform and forwards opt-out state to the originating Apten account.

7. Your rights and choices

If you are a prospective student and want your data removed from Klozur's systems, you have two options:

• Reply STOP to any SMS from the school — your phone will be added to the Do-Not-Contact list and no further messages will be sent.
• Email privacy@klozur.ai with the subject "Data Deletion Request" and the phone number or email you want removed. We will delete your records from our systems within 30 days and notify you via reply.

Residents of California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and other U.S. states with consumer privacy laws have additional rights including access, correction, portability, and the right to appeal a denied request. Email the address above to exercise these rights.

EU/UK residents may exercise rights under GDPR including erasure, rectification, and portability through the same address.

8. Security

Data is encrypted in transit (TLS 1.2+). Passwords are stored as salted hashes. Apten API keys, Stripe secrets, and other credentials are held in server-side environment variables, never in client-side code. Access to production systems is restricted to Klozur partners. See our Terms of Service for additional security commitments.

9. Children's privacy

Klozur is a B2B service for education institutions and is not directed at children under 13. We do not knowingly collect information from children under 13. If you believe a child's information has been submitted, contact us and we will remove it.

10. Changes to this policy

We may update this policy from time to time. Material changes will be posted here with an updated "Last updated" date. Continued use of the service after an update constitutes acceptance of the revised policy.

11. Contact

Questions or requests: privacy@klozur.ai
Klozur LLC, Pennsylvania, United States