SEFA Software LLC
Privacy Policy
Effective date: August 22, 2026 · Last updated: September 15, 2026
Encore Dance is operated by SEFA Software LLC. These terms apply to your use of https://encoredance.app and related services.
1. Introduction
SEFA Software LLC ("SEFA Software LLC," "we," "us," or "our") operates Encore Dance(the "Service"), a software platform for dance studios to manage private lessons, scheduling, packages, attendance, and related studio operations. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit https://encoredance.app, create an account, or use the Service.
By accessing or using the Service, you acknowledge this Privacy Policy. If you do not agree, do not use the Service.
2. Roles and responsibilities
2.1 Studio customers
Dance studio owners and authorized staff ("Studio Customers") subscribe to the Service and control the studio account. Studio Customers decide what information to enter about their instructors, parents, and students, and how that information is used in studio operations.
2.2 End users
Instructors and parents ("End Users") are typically invited to a studio account by a Studio Customer. End Users interact with studio-specific features such as scheduling, booking, balances, and check in.
2.3 Our role
For account, billing, security, and platform operation data, SEFA Software LLC acts as a data controller (or equivalent under applicable law). For most student, scheduling, and studio operational data entered by a Studio Customer, we generally process information on behalf of the Studio Customer as a data processor under our Studio Data Processing Addendum. Studio Customers are responsible for providing appropriate notices to their End Users and for obtaining any required consents, including for information relating to minors.
3. Information we collect
3.1 Information you provide
- Account information: name, email address, password (stored in hashed form), and profile details.
- Studio information: studio name, slug, timezone, settings, package templates, policies, and Venmo or payment instructions you choose to display.
- People records: instructor names, parent names, parent email addresses, optional phone numbers, student names, internal notes, and relationships between parents and students.
- Scheduling and operations data: availability windows, lessons, attendance, cancellations, lesson invites, check in codes, and package or ledger entries.
- Payment-related metadata: payment status, method (such as Venmo or cash), amounts, confirmation notes, and references you or studio staff enter. We do not store full payment card numbers in the current version of the Service.
- Communications: support requests, feedback, and other messages you send to us.
3.2 Information collected automatically
- Log and device data: IP address, browser type, operating system, pages viewed, timestamps, referring URLs, and diagnostic events.
- Authentication data: session tokens and security logs related to signing in and account access.
- Kiosk and security events: check in attempt timestamps and success or failure indicators tied to a studio account.
- Cookies and similar technologies: used to maintain sessions, protect accounts, and keep the Service functioning. See Section 10.
3.3 Information from third parties
We may receive limited information from infrastructure and service providers that help us host, secure, or deliver the Service, such as hosting logs or email delivery status if you enable email features.
4. How we use information
We use information to:
- Provide, operate, maintain, and improve the Service.
- Create and manage accounts, studios, and user roles.
- Enable scheduling, booking, package tracking, attendance, check in, and related studio workflows.
- Process subscriptions and communicate about billing, trials, and account status.
- Send transactional messages such as account notices, security alerts, and service updates.
- Monitor, prevent, detect, and respond to fraud, abuse, security incidents, and technical issues.
- Comply with law, enforce our Terms of Service, and protect rights, safety, and property.
- Generate aggregated or de-identified analytics to understand product usage and reliability.
5. Legal bases for processing (EEA/UK users)
If you are located in the European Economic Area or the United Kingdom, we process personal data under one or more of the following bases:
- Performance of a contract: to provide the Service you or your studio requested.
- Legitimate interests: to secure, improve, and operate the Service, prevent abuse, and support customers, balanced against your rights.
- Consent: where required for optional communications or specific features.
- Legal obligation: where processing is necessary to comply with applicable law.
6. How we share information
We do not sell personal information. We may share information in these situations:
6.1 Service providers
We use trusted vendors to help us operate the Service. They may access information only as needed to perform services for us and are subject to contractual confidentiality and security obligations. Current categories include:
- Cloud hosting and application infrastructure (for example, Render).
- Database hosting (for example, Neon PostgreSQL).
- Email delivery providers if enabled (for example, Resend).
- Payment processors if and when subscription billing is enabled (for example, Stripe).
6.2 Studio-controlled sharing
Information entered into a studio account is visible to authorized studio staff and, where applicable, to linked parents and instructors according to role permissions configured in the Service.
6.3 Legal and safety
We may disclose information if we believe in good faith that disclosure is necessary to comply with law, regulation, legal process, or governmental request; to enforce our agreements; or to protect the rights, property, or safety of SEFA Software LLC, our users, or others.
6.4 Business transfers
If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction, subject to standard confidentiality protections.
7. Children's and student privacy
The Service is designed for use by studios, instructors, and parents. It is not intended for direct use by children under 13, and we do not knowingly collect personal information directly from children under 13.
Student profiles store limited identifiers only (first name, optional last initial, and a studio assigned display handle). Full names are not stored. Sensitive notes and check in credentials are kept in a separate encrypted vault.
Student information is entered by a Studio Customer or linked by a parent or guardian who accepts our agreements in the product. The Studio Customer remains responsible for obtaining any required parental consent under laws such as the Children's Online Privacy Protection Act (COPPA) where applicable. We maintain a timestamped record when parents authorize data processing and when studios attest to having obtained consent.
If you believe a child under 13 has provided personal information directly to us, contact privacy@encoredance.app and we will take appropriate steps to review and delete the information where required.
8. Data retention
We retain information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, enforce agreements, and maintain security. Retention periods may vary based on account status, studio deletion, legal holds, and backup cycles.
When a studio owner deletes a studio account through Account and privacy settings, the studio is closed, staff and parent access ends, and student records are archived for a defined retention period (currently up to two years) before permanent deletion, except where longer retention is required by law or for billing, security, or dispute resolution.
When a parent deletes their account at a studio, we remove their login and contact link from that studio. Student records remain with the studio as operational data controlled by the Studio Customer.
Legal consent records, audit logs, and billing records may be retained after account deletion where required by law or legitimate business needs.
9. Security
We use administrative, technical, and organizational measures designed to protect information, including encryption in transit, access controls, tenant isolation, hashed passwords, and monitoring for abuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
You are responsible for maintaining the confidentiality of your credentials and for configuring appropriate access within your studio account.
10. Cookies and similar technologies
We use cookies and similar technologies that are necessary for authentication, session management, security, and core functionality. We do not use advertising cookies in the current version of the Service.
You can control cookies through browser settings. Disabling essential cookies may prevent parts of the Service from functioning.
11. Your privacy rights
Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal information, and to receive a portable copy of certain information.
11.1 United States state privacy laws
Residents of certain U.S. states may have additional rights, including the right to know categories of information collected, to request deletion, and to opt out of certain processing. We do not sell personal information or share it for cross-context behavioral advertising.
11.2 Self-service in the product
Studio owners, instructors, and parents signed in to a studio can use Account and privacy (Settings → Account in the studio dashboard) to:
- Download a portable JSON copy of personal and studio-related data available to their role (access and data portability).
- Delete their parent or instructor account from a studio, or delete a studio account entirely as the studio owner (deletion requests).
Deletion requires password confirmation and an explicit confirmation step. Exports do not include passwords, session tokens, or check in code values. We log export and deletion requests in our audit trail.
Studio owners receive a broader export of studio operational data. Instructors and parents receive data relating to their account and assigned or linked dancers only. End Users requesting changes to studio-entered data about someone else may need to contact their studio directly; we will assist Studio Customers where appropriate.
11.3 Other requests
For rights we cannot fulfill in the product, verification issues, authorized-agent requests, or questions about data processed on behalf of a studio, contact privacy@encoredance.app. We may need to verify your identity before responding.
12. International users
If you access the Service from outside the United States, you understand that information may be processed and stored in the United States and other countries where we or our service providers operate. Those countries may have different data protection laws than your country of residence.
13. Third-party links and services
The Service may reference third-party services such as Venmo or future payment tools. Those services are governed by their own terms and privacy policies. We are not responsible for third-party practices.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will provide notice by posting the updated policy on https://encoredance.app, updating the "Last updated" date, and, where appropriate, sending account or email notice. Continued use after the effective date constitutes acceptance of the updated policy.
15. Contact us
For privacy questions or requests, contact:
SEFA Software LLC
[Registered business address — update before launch]
Privacy self-service: signed-in studio owners, instructors, and parents can download data or delete their account from Account and privacy (Settings → Account) in the studio dashboard.
Privacy: privacy@encoredance.app
Legal: legal@encoredance.app
Support: support@encoredance.app