Privacy Policy

Introduction

BailaYa is a dance studio management platform operated by Infinity Curve LLC (“we”, “our”, or “us”), a company registered in Georgia, which is responsible for the platform and for the personal data described in this policy. Paid BailaYa subscriptions, and the platform fees charged on payments your students make, are sold and billed by our affiliate Likotech Software, a corporation registered in Wyoming, United States, which is the merchant of record for those charges. We are committed to protecting your privacy and handling your personal data with transparency and care.

This Privacy Policy explains how we collect, use, share, and safeguard your information when you use BailaYa.

Information We Collect

We collect and process personal information that you provide directly, including:

• Account and Studio Information: name, email address, phone number, studio name, and billing details
• Student and Instructor Information: names, attendance history, enrollment records, emergency contacts, and optional notes
• Usage Data: activity logs, device information, and analytics to understand how the platform is used
• Communication Preferences: notification, email, and subscription settings
• Third-Party Sign-In: if you choose to sign in with Google or Facebook, we receive your name and email address from that provider

Depending on your studio's use, you may also store student guardian/parent contact details.

Health and Other Sensitive Information

Some studios ask their students for sensitive information — most often about injuries, medical conditions or medication, because dance carries a risk of injury and an instructor may need to know. Data protection law treats this as a special category and gives it extra protection. Here is how it works on BailaYa:

• The studio decides whether to ask. BailaYa does not require it, and many studios never do. When a studio does ask, it is the studio — not BailaYa — that decides what to ask and why.
• You will be asked to agree explicitly, separately from anything else you sign, before the information is submitted. If you do not agree, it is not collected. Agreeing to a waiver is not the same thing and is not treated as consent for this.
• BailaYa stores it on the studio's behalf and does not use it for any purpose of its own. It is never used for advertising, never sold, and never shared beyond the providers listed in our sub-processor list.

You can withdraw your agreement, or ask for this information to be corrected or deleted, at any time — contact your studio, or us at hello@bailaya.com. Withdrawing does not affect anything done before you withdrew.

Protection of Minors

Dance studios often enroll children, and we recognize the importance of protecting minors' privacy.

• We do not knowingly collect personal data directly from minors using BailaYa.
• Any minor-related information stored in BailaYa is provided by the studio or a parent/guardian, not by the child.

If we become aware that personal data of a child under 16 has been provided to us directly without proper parental or studio authorization, we will take steps to delete it.

Parents or guardians may contact us to request review, modification, or deletion of their child's data.

How We Use Your Information

We use personal information solely for legitimate business purposes, including:

• Operating, maintaining, and improving the BailaYa platform
• Managing studio, instructor, and student records
• Sending service updates and administrative communications
• Providing customer support
• Enhancing platform functionality and user experience
• Ensuring system security and preventing misuse
• Complying with legal and regulatory requirements

Data Sharing and Third Parties

We do not sell your personal information.

We may share data only when necessary and in the following circumstances:

All third-party service providers are required to handle your data securely and in compliance with applicable privacy laws.

For the specific companies we use and what each one does, see our sub-processor list.

If you run a studio, we handle your students' data as your processor. The terms are set out in our Data Processing Agreement, which applies automatically — there is nothing to sign.

Your Rights

Depending on your region, you may have the right to:

• Access personal data we hold about you
• Request correction of inaccurate information
• Request deletion of personal data under certain conditions
• Restrict or object to certain types of processing
• Request a copy of your data in a portable format
• Withdraw consent where consent was previously provided

Deleting your account

You can delete your account yourself, from your profile settings. Nothing is deleted straight away: your account is scheduled for deletion 30 days later, and you can cancel at any point in those 30 days. The delay is there so that an accidental deletion — or one made by someone who briefly had access to your account — can be undone. After 30 days it is permanent.

When your account is deleted, we keep your payment records without your name attached. We are legally required to keep records of money received, and we are allowed to do so under data protection law; everything else — your profile, class history, form answers and messages — is deleted.

Rights Under Specific Laws

Which law applies depends on where you are. The following apply to BailaYa:

• European Economic Area and United Kingdom — the GDPR and UK GDPR give you the rights listed above, and the right to lodge a complaint with your local supervisory authority.
• Switzerland — the Federal Act on Data Protection (FADP) gives you the rights listed above, and the right to complain to the Federal Data Protection and Information Commissioner (FDPIC).
• South Africa — the Protection of Personal Information Act (POPIA) gives you the rights listed above, and the right to complain to the Information Regulator.
• Mexico — the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) gives you the ARCO rights: access, rectification, cancellation and objection, and the right to complain to the competent authority.
• Georgia — the Law of Georgia on Personal Data Protection applies to us directly, as Infinity Curve LLC is established there, and gives you the right to complain to the Personal Data Protection Service.
• Türkiye — the Personal Data Protection Law (KVKK) gives you the right to learn whether your data is processed, to request correction or erasure, and to complain to the Personal Data Protection Authority (KVKK).
• United States — where state privacy laws such as those in California apply, you may request access to or deletion of your personal information, and may appeal a refusal. We do not sell personal information. We share data for cross-context behavioural advertising only where you have accepted advertising cookies, and you can withdraw that at any time from the cookie choices in our footer.
• Elsewhere — comparable rights may apply under your local law, and we will honour them where they do.

To exercise these rights, contact us using the details below.

Data Security

We implement reasonable technical and organizational safeguards to protect data against:

• Unauthorized access
• Disclosure
• Alteration
• Loss or destruction

No system can guarantee absolute security, but we continuously work to strengthen and maintain platform protection.

Cookies and Tracking Technologies

BailaYa uses cookies and similar technologies to operate, secure, and improve the platform:

• Essential — authentication, session, and preference cookies required to sign in and keep your settings (such as your active studio)
• Analytics — to understand how the platform is used so we can improve it
• Security — bot and abuse protection (for example, Google reCAPTCHA)
• Advertising — Google Ads and the Meta Pixel, set only if you accept advertising cookies. These share data with Google and Meta.

You can control cookies through your browser settings. Disabling essential cookies may affect core functionality.

For the specific cookies we set, what each one does and how long it lasts, see our cookie notice.

International Data Transfers

BailaYa is operated by Infinity Curve LLC in Georgia, and the platform and its database are hosted on our servers in the European Union — that is where studio and student data is stored. Infinity Curve LLC is established in Georgia and operates the platform from there, so your data is also processed in Georgia. Encrypted backups are held in the European Union. Billing for paid subscriptions and platform fees is handled from the United States by Likotech Software. Traffic to the site passes through Cloudflare, which protects and delivers it. Cloudflare decrypts each request at whichever of its data centres is closest to the visitor, so all traffic — not only your IP address — passes through its global network and may be processed outside the European Union while in transit. It is not stored there. Our other service providers — email, payment processing, and the integrations your studio connects — may likewise process data in other countries. This means your personal data may be transferred outside the country where you live, including to countries whose data protection laws differ from your own and which have not been found to provide an equivalent level of protection. Where we transfer personal data internationally, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or an equivalent mechanism under the applicable law, and we transfer only the data needed for the purpose.

Changes to This Policy

We may update this Privacy Policy periodically. Updated versions will be posted on this page with a revised "Last Updated" date. Continued use of BailaYa after such changes constitutes acceptance of the updated policy.