Privacy Policy
Last updated: 1 September 2026 · Effective: 1 September 2026
This Privacy Policy explains how EnlitEDU Inc. ("EnlitEDU", "we", "us") collects, uses, discloses, and protects information in connection with our website and the LioraAI platform. It also explains how we handle student education records that institutions ask us to process on their behalf.
Contents
1. Information we collect
Information you give us
- Contact & demo requests: name, work email, institution, role, and any message you send through our forms.
- Correspondence: emails, support tickets, and call notes.
Information institutions provide (processed on their behalf)
- Academic records: transcripts, course data, grades, GPA, credit hours, test scores, military training records (JST, DD-214, CCAF), certifications, and portfolio materials.
- Student identifiers: name, student ID, date of birth, and contact details as contained in the records or SIS/CRM data the institution shares.
- Evaluation decisions and audit metadata generated during processing.
Information collected automatically
- Usage & device data: IP address, browser type, pages viewed, referring URLs, and timestamps, collected through cookies and similar technologies (see section 10).
2. How we use information
- To respond to inquiries, schedule demos, and provide customer support.
- To operate, maintain, secure, and improve the LioraAI platform under our contract with the institution.
- To generate evaluation recommendations, articulation mappings, GPA normalization, and audit documentation as instructed by the institution.
- To send service and administrative communications, and, where permitted, relevant product updates you can opt out of at any time.
- To comply with legal obligations and enforce our agreements.
We do not sell personal information, and we do not use student education records for advertising.
3. Student data & FERPA
When we process student education records, we do so only as a "school official" with a legitimate educational interest under FERPA (34 CFR § 99.31(a)(1)), under the direct control of the institution, and solely to perform the services in our agreement. We do not re-disclose student records except back to the institution or as the institution directs in writing. A Data Processing Agreement (DPA) governs each institutional engagement.
4. AI and model training
Student data is never used to train general-purpose or commercial AI models. LioraAI applies institution-specific rules and, where an institution opts in, learns from that institution's own historical decisions to improve suggestions for that institution only. Model improvements are not shared across customers using another institution's identifiable student data.
5. How we share information
| Recipient | Purpose |
|---|---|
| The institution (our customer) | Delivery of evaluation results and audit records |
| Sub-processors (section 6) | Hosting, infrastructure, and support tooling under contract |
| Professional advisors | Legal, accounting, and insurance, as needed |
| Authorities | When required by law, subpoena, or to protect rights and safety |
| Successor entity | In a merger, acquisition, or asset sale, subject to this policy |
6. Sub-processors
We use a limited set of vetted sub-processors, primarily for cloud hosting and infrastructure. Our current sub-processor list is available on request at info@enlitedu.com and is maintained as part of each institutional DPA. We provide institutional customers advance notice of material sub-processor changes.
7. Data retention
- Website / prospect data: retained while there is an active relationship and for a reasonable period afterward, then deleted or anonymized.
- Student records & evaluation data: retained per the institution's instructions in the DPA. On termination, we return or securely delete institutional data within the period specified in the agreement.
8. Security
We maintain administrative, technical, and physical safeguards designed to protect information, including encryption in transit and at rest, access controls, logging, and an immutable audit trail for every evaluation decision. See our Security & Trust page for details, including our compliance program status.
9. Your rights & choices
Depending on your location (including under the CCPA/CPRA and similar U.S. state laws), you may have the right to access, correct, delete, or receive a copy of your personal information, and to opt out of certain processing. For personal information EnlitEDU controls, contact info@enlitedu.com. For student records held within LioraAI, please contact your institution, which is the controller; we will support the institution's response.
10. Cookies & analytics
We use strictly necessary cookies to run the site and, where enabled, analytics cookies (e.g., Google Analytics via Google Tag Manager) to understand aggregate site usage. You can control cookies through your browser settings. We do not use cross-site advertising cookies.
11. Children's privacy
Our website and platform are intended for institutional and adult users. We do not knowingly collect personal information directly from children under 13. Student records we process are provided by institutions under FERPA, not collected from students directly through this site.
12. International data transfers
EnlitEDU is based in the United States and processes data in the United States. If you contact us from outside the U.S., your information will be transferred to and processed in the U.S.
13. Changes to this policy
We may update this policy from time to time. We will post the revised version here with a new "Last updated" date and, for material changes affecting institutional customers, provide notice under the DPA.
14. Contact us
EnlitEDU Inc.
3840 Windermere Pkwy, Suite 403, Cumming, GA 30041, USA
Email: info@enlitedu.com