On this page
Koro Solutions is a service brand operated by Brian Barjam Koro, a sole proprietor based in California, United States. In this policy, “Koro,” “we,” “us,” and “our” refer to Brian Barjam Koro operating under the Koro Solutions brand.
This Privacy Policy explains how we collect, use, disclose, and retain personal information when you visit korosolutions.com, submit an inquiry, schedule a conversation, or communicate with us about Koro's services. It also explains the choices available to you.
This policy does not govern a client's use of its own systems or information that Koro handles solely under a separate client agreement and the client's instructions. See Client data and student records below.
Information we collect
We collect only the information reasonably needed to operate the website, respond to inquiries, and manage business relationships.
Information you provide
You may provide information when you:
- submit an inquiry form;
- schedule or join a meeting;
- email, call, or otherwise communicate with us;
- request a proposal or information about a service; or
- become a client or work with us on behalf of an organization.
Depending on the interaction, this information may include your first and last name, business email address, institution or organization name, website, role, HubSpot situation, planning priority, requested service, project needs, meeting details, and the content of your communications. For a BPPE service inquiry, it may also include an optional BPPE school code, the service you are considering, whether there is an active BPPE or legal matter, and limited context you choose to provide. If we begin a business relationship, we may also maintain proposal, contract, billing, project-administration, and support records.
Information processed when you use the website
The website and the providers that deliver and secure it may process limited technical information. This can include your IP address, browser or device type, requested page, referring page, date and time, and security or access events. The exact information and retention can depend on the hosting, network, and security providers involved.
When a valid inquiry submission is attempted, the website uses the source IP address to create a keyed, one-way code for a 15-minute rate-limit window. A Cloudflare-hosted database stores that code, the window start and expiration times, and an attempt count to prevent repeated or abusive submissions. The rate-limit record does not contain the raw IP address or the submitted form answers. After the window expires, the record is no longer used and is deleted when a later rate-limit check runs.
Koro does not currently install a separate, general-site optional analytics or advertising tracker. The embedded HubSpot scheduler processes the interaction and performance information described under Cookies and online tracking.
Back to topInquiry forms and meetings
The homepage planning form asks for your first name, business email address, and institution or organization website. Depending on the requested service, it may also ask for:
- your main priority or requested service area;
- your current HubSpot or technology situation when it is relevant; and
- limited optional context you choose to provide.
HubSpot project-inquiry forms ask for the same identifying and HubSpot context. The Onboarding & Support form also asks which path you are considering and requires a brief description of what needs to change. Other HubSpot project-inquiry forms include an optional field for additional context.
The Admissions Operating System request form also asks what you are considering, your role, the highest-priority operating breakdown, your current admissions technology, and a description of what is happening now. The BPPE service request form asks for your first and last name, business email, institution name and website, an optional BPPE school code, the service you are considering, whether there is an active BPPE or legal matter, and limited context you choose to provide. Context is required only when the matter is active or uncertain. Do not use the form to provide student records, underlying case documents, or detailed legal facts.
When you submit the form, we also process the page address and page name associated with the request and the submission time. If the page address contains campaign information, the form retains only the standard utm_source, utm_medium, utm_campaign, utm_term, and utm_content parameters. Other query parameters are discarded, except for a supported service selection on the contact page. We send these details to HubSpot Forms and CRM so we can receive, organize, attribute, and respond to the inquiry. The Koro website does not keep a separate application database containing the submitted form answers. Its only application-database record is the limited rate-limit record described under Information we collect.
If you use the HubSpot Meetings scheduler, the scheduling experience is provided by HubSpot. It may appear within the Koro website or open on a HubSpot-hosted page. HubSpot receives the technical, contact, scheduling, and page-context information needed to display availability, create the meeting, and send booking communications. HubSpot's own terms and privacy notices apply to that service. HubSpot provides Koro with the details needed to arrange and manage the meeting.
The booking page accepts the standard campaign parameters utm_source, utm_medium, utm_campaign, utm_term, and utm_content. If a referring link includes them, HubSpot may use them to associate the booking with its source. Other booking-page query parameters are removed before the scheduler loads.
Do not submit passwords, access credentials, student or applicant records, payment information, government identification numbers, health information, or other confidential, regulated, or sensitive data through the public inquiry form or scheduler.
Back to topHow we use information
We use personal information to:
- review, qualify, route, and respond to inquiries;
- understand an organization's HubSpot situation, admissions operating need, requested BPPE review, or other requested work;
- schedule and prepare for conversations;
- prepare proposals and determine fit, scope, responsibilities, and fees;
- identify when an active BPPE or legal matter may require a different intake boundary or review by qualified California counsel;
- manage prospective and active business relationships;
- provide requested services under a separate client agreement;
- operate, maintain, troubleshoot, and secure the website and inquiry process;
- prevent abuse, fraud, and unauthorized activity;
- maintain appropriate business and legal records;
- comply with legal obligations and respond to lawful requests; and
- protect Koro, our clients, visitors, and others.
Submitting an inquiry authorizes us to respond to that inquiry. We do not treat it as consent to recurring marketing communications. If we send optional marketing email, you may unsubscribe using the instructions in the message or contact us. We may still send nonmarketing communications needed to answer a request, manage an active engagement, or meet a legal obligation.
Back to topHow we disclose information
We do not sell personal information. We do not share personal information for cross-context behavioral advertising, and we do not disclose it to third parties for their own direct marketing.
We may disclose information in the following circumstances:
Providers that help us operate
Our current website delivery uses OpenAI's ChatGPT Sites and Cloudflare for functions such as hosting, network delivery, access control, and security. HubSpot receives valid inquiry-form submissions and supports our CRM and scheduling process. We may also use providers for email, communications, document handling, accounting, and business administration. A provider's processing depends on the function it performs, its configuration, the applicable agreement, and law.
People who support Koro
Authorized personnel and contractors may access information when reasonably necessary to review and respond to inquiries, coordinate meetings, prepare proposals, administer the business, or support an engagement. They may use the information only for the work they perform for Koro and consistent with applicable confidentiality and data-protection obligations.
Professional advisers
We may disclose information to lawyers, accountants, insurers, auditors, and other professional advisers when reasonably necessary for their work.
Legal and safety reasons
We may disclose information when we reasonably believe disclosure is required by law, legal process, or a valid government request, or when it is necessary to protect rights, safety, property, systems, or users.
Business changes
Information may be reviewed or transferred as part of a proposed or completed financing, reorganization, sale, merger, transfer of services or assets, or similar business transaction. Any recipient remains subject to applicable law and any commitments that continue to apply.
At your direction
We may disclose information when you ask us to, authorize the disclosure, or choose to interact with a third-party service.
Back to topThird-party websites
The website embeds or links to services and pages operated by other organizations, including HubSpot Meetings, the HubSpot Solutions Directory, and the HubSpot Help Center. We do not control those services. When you use an embedded service or follow an external link, the other organization's terms, privacy notices, security, and data practices apply.
A link does not mean that Koro controls the linked service or that the linked organization is responsible for Koro's services.
Back to topData retention
We keep personal information only for as long as reasonably needed for the purpose for which it was collected and for legitimate business, legal, accounting, security, and recordkeeping needs.
The retention period can depend on:
- whether an inquiry is active or a business relationship continues;
- the type and sensitivity of the information;
- the work requested or provided;
- contractual, accounting, tax, insurance, or legal requirements;
- the need to resolve a dispute, prevent abuse, or protect systems and rights; and
- the retention and backup cycles of the providers we use.
When information is no longer reasonably needed, we may delete, deidentify, or securely archive it as appropriate, subject to applicable law and operational backup cycles.
Back to topSecurity
We use administrative, technical, and organizational measures intended to protect personal information in proportion to the information and the way we use it. No website, transmission, or storage system can be guaranteed completely secure.
The public inquiry form and scheduler are not secure channels for confidential records or system access. Do not use them to send passwords, access credentials, student or applicant records, payment information, government identification numbers, health information, or other confidential, regulated, or sensitive data. If an engagement requires Koro to access confidential or regulated information, the parties should define the approved systems, access controls, responsibilities, and security terms in writing before that access begins.
Back to topYour choices and privacy requests
You may contact us to:
- ask what personal information we maintain about you;
- request correction of inaccurate information;
- request deletion of information that we no longer need, subject to legal and business-record exceptions;
- ask a question about how we use or disclose information; or
- opt out of optional marketing email.
Privacy rights vary by location and may be subject to exceptions. We may need to verify your identity and authority before completing a request. We will use information submitted with a privacy request only to review, verify, and respond to that request.
To make a request, email brian@korosolutions.com with “Privacy request” in the subject line. If your request concerns information controlled by an institution or another Koro client, contact that organization directly first. We may be able to act on client-controlled information only under the client's instructions.
Back to topClient data and student records
This policy covers the public website, direct inquiries, and Koro's own business records.
When Koro handles personal information in a client's HubSpot portal or another client-controlled system solely to perform agreed services, the client controls that information and Koro acts on the client's instructions. The client's privacy notice, the written client agreement, and any applicable data-processing or security terms govern that work. This policy continues to govern Koro's own records, such as client contact, billing, and relationship-management information.
Koro does not use the public inquiry form to collect student records. Do not submit student or applicant records or other regulated client data through that form. A person seeking access to, correction of, or deletion of information controlled by a school or another client should contact that organization. Koro may act on client-controlled information only under the client's instructions.
Back to topChildren's privacy
The website is intended for organizations and adult professionals. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13 through the website. If you believe a child has provided information through the website, contact us so we can review and address it.
Back to topProcessing locations
Brian Barjam Koro is based in California, United States. Koro and the providers supporting the website, inquiries, meetings, and business communications may process information in the United States and in other locations where they operate. Privacy laws can differ between locations.
If a client engagement requires specific processing-location, transfer, or residency terms, those terms must be addressed in the applicable written client agreement before the relevant processing begins.
Back to topChanges to this policy
We may update this policy when our website, tools, services, or legal obligations change. We will post the revised policy on this page and update the date at the top.
If a material change would allow us to use or disclose information already collected in a materially different way, we will provide additional notice and obtain consent when required by law. A revised policy otherwise applies from its stated effective date.
Back to topContact Koro
Questions or privacy requests can be sent to:
Koro SolutionsOperated by Brian Barjam Koro, sole proprietor
California, United States
brian@korosolutions.comBack to top