Privacy Policy

EXPOND PRIVACY POLICY

Updated and Effective, June 15, 2026

Expond, Inc., is a software company based in Santa Barbara, California (“Expond,” “we,” “us,” or “our”). Expond provides software, booking, administrative, and related tools that help businesses, organizations, providers, and participants coordinate wellness and fitness-related experiences, including on-demand sessions and recurring classes (“Experiences on Demand” or “EOD”). This Privacy Policy explains how we collect, use, disclose, and protect personal information through our websites, booking pages, mobile platform, provider tools, client/admin tools, and any  online services that link to this Privacy Policy (collectively, the “Services”). We aim to provide information and services that are relevant to the needs of our users, including Accounts, Participants, Providers, and other users of the Services, while helping protect personal information. By using the Services or otherwise submitting personal information to Expond, you acknowledge that you have read and understand this Privacy Policy, and where consent is required by applicable law, consent to Expond’s collection, use, disclosure, and protection of personal information as described in this Privacy Policy.

You can view and manage cookie preferences through our cookie banner or preference center, where available. To the extent any personal information is collected through first-party Cookies, this Privacy Policy applies. Personal information collected through a third-party Cookie may also be subject to the privacy policy of that third party, and Expond does not control that third party’s cookie practices.

TYPES OF INFORMATION WE COLLECT

Information You Provide Directly to Expond

Depending on how you use the Services, you may provide Expond with information about yourself or others. For example:

  • If you request information about Expond, create an account, subscribe to updates, contact us, or otherwise communicate with us, we may collect information such as your name, email address, phone number, organization, role, and the content of your communications.
  • If you book or participate in an EOD, we may collect information such as your name, email address, phone number, employer or organization, booking details, session location or service address, service preferences, attendance or participation information, and any age, gender, preferences, limitations, or accommodation requests that you voluntarily provide or that are reasonably needed to help coordinate an appropriate service or Provider.
  • If you manage or administer an account for a business, organization, or other customer (“Account”), we may collect information such as your name, business contact information, role, Account information, billing information, authorized user information, booking details, and other information needed to coordinate Experiences on Demand.
  • If you provide information about another person, such as booking or purchasing an Experience on Demand for a recipient, inviting a Participant, or identifying an authorized user, Account contact, or Provider, we may collect information such as that person’s name, contact information, relationship to you, service preferences, age, gender, limitations, accommodation requests, and other information you provide to coordinate, manage, or support the applicable Services.
  • If you provide services through the Expond network as a provider (“Provider”), we may collect information such as your name, email address, phone number, business information, biography or profile information, photo or likeness, experience, qualifications, credentials, licenses or certifications where applicable, availability, location preferences, and other information needed to evaluate, onboard, schedule, and work with Providers.
  • If you make or manage a payment through the Services, or if payment or tax information is needed to pay a Provider, payment-related and tax-related information may be collected and processed by our payment service providers, such as Stripe. Expond may receive limited payment, payout, invoice, or transaction information, but does not intentionally collect or store full payment card numbers or full tax identification numbers unless expressly stated at the point of collection.
  • If you participate in surveys, promotions, sweepstakes, feedback requests, testimonials, reviews, or similar activities, we may collect information such as your name, contact information, responses, preferences, eligibility information, feedback, and any other information you choose to provide.

Sensitive Information

We ask that you not provide sensitive personal information through the Services unless it is necessary or helpful for us to provide, coordinate, support, or administer the Services. Sensitive personal information may include Social Security numbers, taxpayer identification numbers, government identification numbers, financial account information, precise geolocation, racial or ethnic origin, political opinions, religious or philosophical beliefs, health information, criminal background information, trade union membership, biometric information, genetic information, sex life or sexual orientation, or similar information protected by applicable law.

Providers may be required to provide tax, identity verification, payment, or payout information, which may include Social Security numbers, taxpayer identification numbers, bank account information, or similar information, to our payment service providers, such as Stripe, in connection with onboarding, payment processing, tax reporting, and compliance. Expond may receive limited verification, payout, tax, invoice, or transaction information from those providers, but does not intentionally collect or store full Social Security numbers, full taxpayer identification numbers, or full bank account numbers unless expressly stated at the point of collection.

Because Expond helps coordinate wellness and fitness-related experiences, you may choose to provide information about preferences, limitations, injuries, pregnancy, accessibility needs, accommodation requests, or other health-related or safety-related considerations. We use this information only as reasonably necessary to coordinate, provide support, or improve the applicable Services, including by sharing it with Providers or other parties involved in the experience when needed.

Information We May Collect Automatically

In addition to information you provide directly, Expond and third-party vendors we use may automatically collect certain information when you use the Services. For example:

  • Usage and Device Information. We may collect information such as your IP address, browser type, device type, operating system, authentication or session identifiers, pages or screens viewed, referring and exit pages, dates and times of visits, links clicked, interactions with the Services, and approximate location based on IP address.
  • Social Login Information. If you access or log in to the Services using a third-party account, such as Google or Apple, we may receive information from that third party, such as your name, email address, account identifier, and other information made available through that login process, depending on your settings with that third party.
  • Location Information. Certain features may collect location information. For example, when Providers use the “On Location” feature, we may collect latitude and longitude information to support that feature, coordinate sessions, verify location-based activity, support security, and troubleshooting.
  • Cookies and Similar Technologies. We use cookies and similar technologies to operate the Services, maintain login sessions, remember preferences, support security, understand usage, improve performance, and analyze how users interact with our websites and booking pages. You can view and manage cookie preferences through our cookie banner or preference center, where available. If you block or disable certain cookies, some features of the Services may not work properly.
  • Analytics, Heatmap, and Session-Replay Tools. We may use analytics, heatmap, and session-replay tools, including Google Analytics and Mouseflow on certain pages, to understand how users interact with the Services, identify technical issues, improve usability, and optimize the user experience. We use available masking or exclusion settings where appropriate and do not use these tools to intentionally collect sensitive personal information.
  • Newsletter Tracking. Marketing or newsletter emails from Expond may include pixels, web beacons, or similar technologies that help us understand whether those emails are opened, links are clicked, or communications are effective.
  • Third-Party Cookies and Similar Technologies. Some cookies and similar technologies are provided by third parties. Personal information collected by a third party through a third-party Cookie or similar technology may also be subject to that third party’s privacy policy, and Expond does not control that third party’s practices.

Information from Other Sources

We may receive information about you from other sources where appropriate to operate, support, or administer the Services. For example, Accounts, purchasers, Participants, Providers, third-party login providers, payment service providers, and other vendors may provide information needed to coordinate bookings, administer Accounts, onboard Providers, process payments, or support the Services. We may also review publicly available information, including public professional profiles, websites, licenses, certifications, or public social media profiles, when evaluating or working with Providers, or when reasonably necessary to protect the safety, security, rights, or interests of Expond, Providers, Participants, Accounts, or others.

HOW WE USE YOUR INFORMATION

Expond may use the information we collect for business and operational purposes, including:

  • to provide, operate, maintain, and improve the Services;
  • to create and manage accounts, profiles, bookings, schedules, Provider onboarding, Account administration, and related service workflows;
  • to coordinate Experiences on Demand with Participants, Providers, Accounts, venues, locations, and other parties involved in the booking, including confirming booking details, session locations, Provider assignments, arrival information, attendance, service preferences, accommodations, and other information reasonably needed to provide or support the service;
  • to personalize or recommend services, Providers, bookings, content, or communications based on information such as your prior bookings, stated preferences, account activity, or interactions with the Services;
  • to communicate with you about bookings, sessions, Account activity, Provider opportunities, support requests, administrative matters, updates to our policies, and other service-related information;
  • to respond to questions, requests, feedback, complaints, or support needs;
  • to process payments, invoices, Provider payouts, tax reporting, and related transaction information through our payment service providers, such as Stripe;
  • to send newsletters, marketing communications, promotions, surveys, or other information that may be of interest to you, where permitted by law and subject to any available opt-out or unsubscribe options;
  • to administer surveys, promotions, sweepstakes, feedback requests, testimonials, reviews, or similar activities;
  • with your consent or as otherwise permitted by law, to display or share feedback, testimonials, reviews, photos, videos, or other content you provide, including on the Services, in marketing materials, or on social media;
  • to analyze usage, improve usability, troubleshoot issues, measure newsletter engagement, understand service activity, and improve the user experience;
  • to protect the safety, security, rights, and interests of Expond, Providers, Participants, Accounts, users, and others, including preventing fraud, misuse, unauthorized access, or other harmful activity;
  • to comply with legal, regulatory, tax, accounting, contractual, insurance, and compliance obligations; and
  • for other purposes disclosed at the time information is collected, with your consent, or as otherwise described in this Privacy Policy.

We may use or disclose aggregated, de-identified, or anonymized information for lawful business purposes, including analytics, reporting, benchmarking, service improvement, business planning, research, and understanding usage and wellness trends, provided that such information does not reasonably identify you, your household, or any specific individual.

INFORMATION SHARING PRACTICES

Expond may disclose personal information as described in this Privacy Policy, including:

  • with vendors, processors, and other third parties that help us operate, support, secure, and improve the Services, including hosting, infrastructure, software development, maintenance, monitoring, logging, troubleshooting, customer support, booking, scheduling, payment processing, Provider payouts, tax reporting, email distribution, analytics, security, fraud prevention, survey administration, promotions, and EOD operations, but only as reasonably needed for them to perform services for us or as required by law;
  • with other users, Accounts, Providers, or the public when you choose to make information available, approve its display, or provide content intended for sharing, such as Provider profile information, testimonials, reviews, feedback, photos, videos, or similar content, subject to applicable law and your settings, consent, or authorization where required;
  • with Accounts, venues, Providers, and other parties involved in an Experience on Demand, as reasonably needed to coordinate, schedule, provide, confirm, or support the service. For example, we may share booking details, Participant name, session time, service location or room number, Provider assignment, attendance information, service preferences, and relevant safety or accommodation information when needed;
  • with third-party services you choose to use in connection with the Services, such as third-party login providers, payment providers, or other tools or services you request or authorize;
  • with purchasers, recipients, Participants, Account contacts, or other people involved in a booking or request, as reasonably needed to coordinate, manage, or support the applicable Services;
  • with your consent or as otherwise permitted by law, with third parties for marketing, promotional, testimonial, review, referral, or similar purposes;
  • if we believe disclosure is necessary or appropriate to comply with applicable law, legal process, regulatory obligations, tax obligations, insurance requirements, or contractual obligations;
  • if we believe disclosure is necessary or appropriate to protect the safety, security, rights, or interests of Expond, Providers, Participants, Accounts, users, or others, including investigating potential violations of law, fraud, misuse, unauthorized access, or violations of our agreements or policies;
  • in connection with a corporate transaction, such as a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar business transaction; and
  • for other purposes disclosed at the time information is collected, with your consent, or as otherwise described in this Privacy Policy.

We may disclose aggregated, de-identified, or anonymized information for the purposes described in the “How We Use Your Information” section and for other lawful business purposes, provided that such information does not reasonably identify you, your household, or any specific individual.

The Services are operated in the United States. If you access the Services from outside the United States, your information may be transferred to, stored, or processed in the United States, where privacy laws may differ from those in your jurisdiction.

THIRD-PARTY SITES AND SERVICES

The Services may contain links to, or integrations with, third-party websites, applications, platforms, or services. If you click a third-party link, use a third-party integration, or otherwise interact with a third-party service, that third party may collect information from you directly. This Privacy Policy does not apply to third-party websites, applications, platforms, or services, even if they are linked to or accessible through the Services. We encourage you to review the privacy policies of those third parties to understand how they collect, use, and disclose your information.

USER ACCESS AND CONTROL

Access, Correction, and Deletion Requests

You may contact us to request access to, correction of, deletion of, or limitation on our use of personal information associated with you, subject to applicable law and our need to verify your request. Parents, guardians, or authorized adults may also contact us to request access to, correction of, deletion of, or limitation on our use of personal information associated with a minor for whom they booked, managed, or authorized an Experience on Demand. We may not be able to fulfill every request in full, including where we need to retain information for legal, tax, accounting, safety, security, fraud prevention, dispute resolution, contractual, or operational purposes. We will respond to requests as required by applicable law.

Communication Preferences

You may opt out of marketing communications from Expond, including newsletters, promotional emails, surveys, event updates, or similar non-service communications, by following the “unsubscribe” or preference-management instructions included in those communications, or by contacting us at privacy@goexpond.com.

Even if you opt out of marketing communications, we may still send transactional, administrative, or service-related communications, such as booking confirmations, account notices, Provider communications, payment or payout notices, safety-related communications, and updates to our Terms, Privacy Policy, or other policies.

Third Party Marketing

We do not rent or sell users’ names, email addresses, or mailing addresses to third parties for their own direct marketing purposes. We may send you marketing communications about Expond services, Account-sponsored offerings, promotions, or related opportunities, subject to applicable law and your communication preferences. If we ask for your consent to share personal information with a third party for that party’s own marketing purposes, you may choose whether to provide that consent.

Privacy Rights

Depending on where you live and how applicable privacy laws apply to Expond, you may have additional rights regarding your personal information, including the right to know or access the personal information we collect, correct inaccurate information, request deletion, opt out of certain sales or sharing of personal information, limit certain uses or disclosures of sensitive personal information, and not be discriminated against for exercising privacy rights.

CALIFORNIA PRIVACY RIGHTS

California residents may have certain rights regarding their personal information, subject to applicable law, including rights to request access, correction, deletion, and information about how personal information is collected, used, disclosed, sold, or shared, and to opt out of certain sales or sharing of personal information. To submit a California privacy request, please contact us at privacy@goexpond.com. We may need to verify your identity before processing your request, and we will respond as required by law.

California residents may also request information under California’s “Shine the Light” law, California Civil Code Section 1798.83, about our disclosure of certain personal information to third parties for their direct marketing purposes, if applicable, by contacting us at privacy@goexpond.com. We do not rent or sell users’ names, email addresses, or mailing addresses to third parties for their own direct marketing purposes. If we ask for your consent to share personal information with a third party for that party’s own marketing purposes, you may choose whether to provide that consent.

COOKIES, TRACKING, AND OPT-OUT SIGNALS

You can view and manage cookie preferences through our cookie banner or preference center, where available. You may also be able to control cookies and similar technologies through your browser or device settings. If you disable certain cookies or technologies, some features of the Services may not work properly.

Some browsers offer “Do Not Track” or similar signals. Because there is not a uniform standard for responding to Do Not Track signals, we do not currently respond to all browser Do Not Track signals. Where required by applicable law, we will honor recognized opt-out preference signals or other legally required privacy preference mechanisms.

HOW LONG WE KEEP YOUR INFORMATION

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including for business, operational, legal, tax, accounting, insurance, security, dispute resolution, and compliance purposes. The length of time we keep information may depend on the type of information, our relationship with you, the Services involved, and our legal, contractual, and operational needs.

If you have questions about how long we keep your information, please contact us using the information in the Contact Us section below.

INFORMATION SECURITY

We use commercially reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, disclosure, alteration, loss, misuse, and destruction. Although no method of transmission or storage is completely secure, we take the security of personal information seriously and work to protect it in accordance with this Privacy Policy.

LOCATION OF DATA

Expond is based in the United States, and the Services are operated from the United States. If you access the Services from outside the United States, your personal information may be transferred to, stored in, or processed in the United States or other countries where we or our service providers operate. By using the Services or submitting personal information to Expond, you acknowledge this transfer, storage, and processing. Privacy laws in those locations may differ from the laws in your jurisdiction.

CHILDREN AND MINORS

Minors may participate in certain Experiences on Demand when booked by a parent, guardian, or other authorized adult, and where any required waiver, release, parental consent, or other authorization has been completed. Parents, guardians, or authorized users may provide information about minors when booking, managing, or participating in an Experience on Demand involving a minor.

Minors are not permitted to register for an Account or book an Experience on Demand for themselves. If we learn that a minor has registered for an Account, booked a service, or provided personal information directly in violation of our Terms or applicable law, we may take steps to delete the information, cancel the Account or booking, obtain appropriate consent, or take other action as required or permitted by law.

CHANGES

We may update this Privacy Policy from time to time. When we do, we will post the updated Privacy Policy on the Services and update the “Last Updated” date. Changes will become effective when posted unless otherwise stated.

If we make material changes to how we collect, use, or disclose personal information, we will provide notice as required by applicable law.

CONTACT US

If you have questions about this Privacy Policy or would like to submit a privacy request, you may contact us at privacy@goexpond.com or by mail at:

Expond, Inc.

Attn: Privacy Policy

133 East De La Guerra #E

Santa Barbara, CA 9310

For purposes of applicable UK or EU data protection laws, where applicable, Expond, Inc. is the controller of personal information processed as described in this Privacy Policy.