Enflux Privacy Policy

Version 1.1 2022-12-27

Estia Inc. dba Enflux (“Enflux”) is Delaware corporation with its headquarters in San Antonio, Texas.  Enflux provides online application services for data analytics and visualization and related consulting services.  Most of our customers are colleges or universities that use our services to improve educational outcomes for their students.   

If you have questions or comments about this Privacy Policy, you may reach us at:




Privacy Officer


547 Leigh St.

San Antonio, Texas 78210


This Privacy Policy describes the personal data that we collect from and about individuals who interact with Enflux, including the purposes for which we collect the data, the means of collecting that data, and the circumstances under which we share it with others.  

In general this Privacy Policy does not cover personal data that we process for our customers as part of our services.  We do not use or process that personal data except as instructed by our customer. However, if you have a request or concern about data we have about you in our role as a processor for our customer, please see the Section below captioned Requests to access, amend, delete or restrict the use of your personal data.  



These words have special meanings in this Privacy Policy:

account user” means an individual who interacts with us as a representative of the college, university, or other entity that purchases our services; 

constituent” means an individual whose personal data is provided to us by our customer for processing as part of our data analytics, data visualization, or other services, such as a student, faculty member, or other constituent of an educational institution;

visitor” means an individual who visits our website, interacts with us at a trade show or other industry event, or communicates with us or our partners in some other way other than as an account user or constituent;

we,” “our” and “us” refer to Estia Inc. dba Enflux;

website” refers to www.enflux.com and any other website where this Privacy Policy is posted or referenced;

you” and “your” refer to visitors, account users, and constituents.


Visitors:  We collect data about visitors for the purposes of operating and improving our website, our product offerings, and our technology, and for the purpose of marketing our services, and communicating with  prospective customers via email about our services or topics that may be of interest to them. Please see our Communications Policy below if you do not wish to receive our email.

Automated data collection on our website:  When you visit our website we will capture and analyze information about your visit using our web server logs and third party analytics services such as Google Analytics and Hubspot. For example, we will capture your IP address and internet service provider, the time and duration of your visit, including the time and duration of your visit to each page out our site, your browser type (including plug ins), and information about your device, such as the operating system, time zone setting, and language setting.  We also use clear gifs in our email to discover whether you have opened our email and to help us set cookies to capture and analyze your visits to our site and web served content in the email. We may be able to track whether you arrive at our site by clicking a link in our social media positing. Currently Facebook enables this by means of a tracking pixel. If you arrive at our site by clicking on an advertisement, our advertising service will report to us the fact that you arrived at our site by clicking on this ad and the site where the ad was displayed.  Please see the section below captioned Advertising Ecosystem for more information on information we have about you as a result of our use of these services.  Please see the section below captioned Online Data Collection Techniques for more information on cookies and clear gifs. Please see the section below captioned How to Opt Out of Online Data Collection for information on how to opt out of online data collection. 

Information you volunteer.  If you express an interest in evaluating or purchasing our offerings, whether by chat, email, submission of a web form, telephone, or in person (such as at a  meeting, trade show or other event) we may collect information such as your name, job title, the organization you represent, email address, and phone number. We may receive information of this type that you volunteer to our marketing partners. We will use the information provided by our marketing partners as described in this Privacy Policy, but you should review the privacy policy of any of our partners with whom you interact. Our partners are responsible for using your data in compliance with their own privacy policies   

Third parties who provide content on our site:  We may use services such as Vimeo to show you videos or other content on our site.   This content is displayed on our site by servers that the content provider controls, which means that if you view the content the content provider may use Online Data Collection Techniques to collect information about you.  We will use this information as described in this Privacy Policy, but you should review the privacy policies of these services.  These content providers are responsible for posting and complying with their own privacy policies.


Social Media:  We use social media to promote our business and offerings, such as LinkedIn, Facebook, Instagram, and Twitter.  If you visit our page or site on these services or interact with our postings, we will have access to the information that the provider makes available to users generally, such as your public handle or user name, the fact that you “liked” or “retweeted” a post, any comment you post, and like information.   We may also have information about you that the social media provider collects, which may include information collected via Online Data Collection Techniques.    We will use this information as described in this Privacy Policy, but you should review the privacy policies of the social media providers.  The social media providers are responsible for posting and complying with their own privacy policies. We may also advertise on social media.  See the Sections captioned Automated Data Collection on our Website and Advertising Ecosystem


We associate personal data we collect through your use of social media with other personal data that we have about you as a visitor and account user and use the combined data for the purposes described in this Privacy Policy.


Account Users:  We collect account user data for the purpose of managing our relationship with the organization that is our customer.  For example, we use the data to confirm your identity when you log on to manage the account or request support, to send and collect invoices, and to communicate with the organization about changes to our offering.

If your organization has purchased our services, and you are listed in our account records as a representative of your organization, such as a purchasing manager, billing contact, administrator, support contact, or other role, then we will require you or your organization to provide personal data about you as necessary to manage your account and provide your organization with customer support.  This includes information such as your name, business email address, business phone number, and other contact information. We may also require each account user to have a unique username and password for use in managing the account or requesting support online.  

If you contact us for support via email or chat, we will collect and store any personal data you provide as part of your support request.  

Our customer management and marketing system (currently Hubspot) associates the data we have about you as an account user with data we have about you as a visitor, and we may use that combined data for the purposes described in this Section and the Section above captioned “Visitors.”


Disclosure of your personal data to others

We have never sold personal data.  If we ever sell our company we may transfer your data to the buyer, but we will not sell your personal data separately from a sale of the related business assets.  

We will disclose your data to others only under the following circumstances unless you have given us an advance written consent to disclose it in some other way:

We may disclose your personal data to an acquiror or potential acquirer of our business, but only to the extent customary in these circumstances and subject to the potential acquirer’s agreement to maintain the information in confidence and use it only for the purpose of evaluating the acquisition or managing the business in accordance with this policy.

We use third party services to help us manage our data and our services such as web site hosting companies, content hosting services, email providers, chat service providers, web forms services, customer relationship management services, and email marketing services. These third parties are permitted to use your personal data solely for the purpose of providing their services to us.

We may share your account user data with your organization that is our customer as necessary to manage the customer’s account, collect fees, and otherwise enforce our contract with the customer.  If we have to bring a court action to enforce our rights against your organization we may have to disclose your personal data as part of the litigation or other dispute process, but we will use reasonable efforts to minimize the disclosure and protect it from further use or disclosure. 

We may disclose your personal data to regulatory and law enforcement agencies when we believe release is appropriate to comply with the law or to protect the rights and safety of others, or in response to a subpoena or other compulsory legal process. 



Children’s Privacy

We do not intentionally collect any personal data from anyone under 13 years of age.  If you are a parent or guardian believe that we may have data about your child, please contact us at the address appearing above and we will delete that information.



We have put in place appropriate security measures to prevent your personal data from being accidentally lost or accessed in an unauthorized manner, including being altered or disclosed.  These measures include requiring our service providers to comply with appropriate security measures as necessary for us to meet our security obligations to you.

We have put in place procedures to handle security incidents, including a process for making notifications to you or a data breach as required by law.


Data Integrity

We process personal information only for the purposes for which it was collected and in accordance with this Privacy Policy. We regularly review our data collection, storage, and processing practices to ensure that we only collect, store, and process the minimum personal information needed for the purpose collected. We take reasonable steps to ensure that the personal information which we process is accurate, complete, and current, but we depend on our users to update or correct their personal data whenever necessary. 


International Transfer of Information

Any personal data we collect will be collected, processed and stored on servers based in the United States, but may be accessed by our personnel anywhere in the world.  If our customers transfer personal data to us for processing that is about individuals in the European Economic Area or other non-U.S. jurisdiction we will enter into contractual or other commitments in accordance with the laws applicable to our customer and that data.


Data Retention

We will retain your personal data only for as long as reasonably necessary to fulfil the purpose for which it was collected, and to comply with our legal obligations.  We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.


Requests to access, amend, delete or restrict the use of your personal data.

Please send us a request at the address shown above if you would like to know what personal data we have about you, or would like us to correct inaccurate data, delete your personal data, or restrict the use of your personal data. 

If you believe we have your personal data in our role as a processor for our customer, we ask that you first send your request to our customer.  We will work with our customer to resolve your request. You may contact us directly if you would like, especially if you are not able to resolve your request directly with our customer, and we will work with you to resolve your request.  

We commit to responding to your request promptly and honoring your reasonable requests.  We will comply with all applicable legal requirements related to your requests, but please note that we are not required by law to delete or restrict the use of your data in a way that prevents us from complying with our legal obligations to our customer or that interferes with our reasonable record keeping as necessary to demonstrate compliance with our contracts and applicable law.  


Communications Policy

If you do not want to receive our email you may unsubscribe by using the unsubscribe link in the email or by writing to us at the address above.  If you are a designated representative of our customer you cannot opt out of receiving our communications related to the customer’s account, but we will otherwise honor your opt out request.


Advertising Ecosystem

We use online advertising services that enable a practice referred to as “online behavior advertising.” These services aggregate data about an individual’s behavior on many different sites and online services, and use that data to sell targeted advertising services.  For example, we permit Google’s advertising services to collect data about your behavior on the Enflux website, as do many other website operators who use Google’s ad services. Google combines the data about an individual that it collects from different sources, and uses this aggregate data to sell advertising services that target the display of ads to web users who meet certain behavioral criteria.  Google does not disclose this aggregate data to Enflux, but we are able to infer that users who interact with our ad meet the advertising criteria we provided. Google collects this data using cookies, web server logs (its own and its advertising customers), clear gifs and other online data collection techniques. See Online Data Collection Techniques and How to Opt Out of Online Data Collection.


Online Data Collection Techniques

A cookie is a unique alphanumeric identifier that is placed by a web server on the web visitor’s browser.  Cookies are used to analyze visitors’ use of the website. For example, a website operator can use the cookie to identify the number of unique visitors to the site, whether or not those visitors are repeat visitors, and information about the visitor’s activity on the site, device and device settings.  A tracking pixel, also known as a web bug or web beacon, is a small graphic (usually 1 pixel x 1 pixel) invisible to the eye, that is embedded in web content or email. When content that has an embedded web beacon is viewed, the browser will request content from a web server, which in turn will set a cookie. 


How To Opt Out Of Online Data Collection

You can manage browser cookies through your browser settings. The ‘Help’ feature on most browsers will tell you how to prevent your browser from accepting new cookies, how to have the browser notify you when you receive a new cookie, how to disable cookies, and when cookies will expire. If you disable all cookies on your browser, neither we nor third parties will transfer cookies to your browser. If you do this, however, you may have to manually adjust some preferences every time you visit a site and some features and services may not work.

Our web server does not recognize or respond to any “do not track” setting you may have in your browser.

The third parties who we permit to collect data on our site for their own use have features that allow you to block their data collection via cookies.  See their privacy policies and cookie policies:

Google Ads:  https://policies.google.com/technologies/ads?/hl=en&gl=us&hl=en


Aggregate and Anonymous Data  

This Privacy Policy does not cover our use of anonymous data or aggregate data.  Anonymous data is data about user activity that is not collected in a way that permits us or anyone else to identify that data to a specific individual.  For example, we may ask our service providers who provide site analytics to report the number of site visitors who look at a given page on our site without any information as to IP address or other personal identifier as to any of the visitors.  Aggregate data is data is derived from personal data of many individuals and aggregated in such a way that it cannot be used to identify any individual whose data is included in the aggregate data.


Changes to our Privacy Policy

If we change our Privacy Policy, we will post the modified Privacy Policy on this page, and update the Privacy Policy modification date stated at the top of the policy.  We will manage your personal data in accordance with the version of the Privacy Policy that was posted at the time we collected the data.