InRoll Organization Agreement

This Organization Agreement ("Agreement") is between INROLL LLC, a Washington limited liability company ("InRoll," "we," "us"), and the organization that signs up for or uses InRoll as a customer ("Organization," "you"). It governs the Organization's use of the InRoll platform. The individuals the Organization brings onto the platform (parents, guardians, participants, and staff) are also bound by the end-user Terms of Service; this Agreement governs the business relationship between InRoll and the Organization.

By creating an Organization or using InRoll as an Organization, you agree to this Agreement. The person accepting confirms that they are at least 18 years old and are authorized to bind the Organization.

1. What InRoll provides

InRoll provides a hosted software platform for enrollment, participant and roster management, forms, health information, pickup and check-in, lodging, media, and related features, as InRoll makes them available (the "Service"). InRoll provides the software; the Organization runs its own program.

2. The Organization runs the program and owns its decisions

You are solely responsible for your program and how you use the Service, including:

• your program's rules, schedules, and policies;
• your health and safety practices and any care decisions (InRoll is software, not a medical or care provider);
• your pickup rules, the accuracy of pickup authorizations, and any list of people not permitted to pick up a participant;
• verifying the identity of participants and of pick-up people. InRoll does not use face recognition for identity verification, check-in, or pickup authorization; identity verification is your responsibility;
• the registration forms and questions you create and the information you choose to collect;
• who among your staff and volunteers you grant access to, and at what permission level, including access to health information; and
• your communications with families.

InRoll is not responsible for your program decisions or for the acts or omissions of your staff, volunteers, or families.

Printed on-site records. You will maintain current printed or otherwise offline copies of program-critical information on-site whenever your program is operating, including: health, medication, allergy, emergency-contact, and pickup-authorization information; registration and enrollment records; financial and account information needed to operate your program (such as balances owed and payments received); and any other information critical to operating your program. You will not rely on the Service as your sole means of access to information needed for participant health, safety, emergency response, or program operation. The Service runs on third-party cloud services, and an outage of one or more of them can make the Service temporarily unavailable (see Section 7). To the fullest extent the law allows, and consistent with Sections 11 and 12, InRoll is not liable for losses arising from unavailability of the Service during your program or from your failure to maintain the records this section requires.

3. The data you bring: your responsibilities

This is the core of the Agreement. You control the participant, family, health, photo, and program information you bring onto the platform ("Organization Data"). You represent and agree that:

• Lawful basis and authority. You have the legal right and a lawful basis to collect the Organization Data and to load it into the Service, including any roster you import.
• Parental and participant consents. The entity that creates and runs a camp or program on InRoll is responsible for ensuring that parental consent is gathered from all participants' parents or guardians for all aspects of its program, including consents to collect children's information, to collect and use health information, to take and share photos, and, if you enable it, to use face matching (see Section 4). InRoll provides the platform and consent-recording tools; you remain responsible for the lawful basis and for having the right consents.
• Accuracy. You will use reasonable efforts to keep Organization Data accurate, especially safety-critical data such as pickup authorizations, blocked-person lists, allergies, and medications.
• Access control. You will grant staff and volunteers only the access they need, will remove access promptly when someone leaves, and are responsible for what your users do with their access.
• Notices to families. You will give families the privacy and consent notices your program and applicable law require, consistent with InRoll's Privacy Policy.
• No prohibited use. You will not use the Service unlawfully or to collect data you are not permitted to collect.

You are responsible for your users' compliance with this Agreement and the end-user Terms.

4. Face matching (optional feature you enable)

If you enable the optional face-matching feature:

• It stays off for each participant unless the responsible person (parent or guardian, or adult participant) affirmatively opts in. Accepting the general terms does not turn it on. Consent may be given by the parent or guardian in their own account, in person to your staff who record it, or in writing through your enrollment paperwork and recorded on the participant's profile.
• Recording a consent on a participant profile, individually or in bulk, is your affirmation that a signed written consent from the responsible parent, guardian, or adult participant is on file with your Organization for that participant. You will keep those consent records and produce them on request.
• You are responsible for the lawful basis for using face matching in your program and for any additional notice or written-consent steps your jurisdiction requires. InRoll provides the consent capture, the withdrawal control, an audit trail, and deletion of a participant's face templates on withdrawal.
• You will not record a consent for a participant whose responsible person has not given it, and you will honor withdrawals promptly.
• Minimizing bystanders. It is the responsibility of the people taking and uploading photographs to use reasonable efforts to minimize the capture and upload of imagery of people who have not provided consent, such as bystanders, non-enrolled family members, and passersby.
• Accuracy. Face matching is assistive only; matches may be incorrect or missed and no accuracy level is guaranteed. It is never used for identity verification, check-in, or pickup authorization.

5. Data processing terms

Where InRoll handles Organization Data on your behalf, InRoll acts as your processor / service provider and:

• processes Organization Data only to provide and support the Service and on your documented instructions (which include this Agreement and your use of the features), not for InRoll's own advertising, and never sold;
• makes available the platform's role-based access controls and security measures;
• uses a small set of third-party service providers to operate the Service, as the Privacy Policy describes;
• assists you, taking into account the platform's design, in responding to individuals' privacy rights requests within 45 days (extendable once by 45 days), including an appeal path, and in meeting your breach-notice and security obligations;
• passes deletion requests through to the service providers that hold the affected data so deletion propagates;
• notifies you without undue delay after becoming aware of a security incident affecting Organization Data; and
• on termination, returns or deletes Organization Data per Section 10, except where law requires retention.

A full signed data-processing addendum is expected after attorney review.

6. Payments and fees

Payment processing for your program. When payment processing is used, you accept payments from families through our payment processor, Stripe, and you are the merchant of record: your name appears on family statements, funds settle to your connected account, and you own your prices, taxes, refunds, chargebacks, and disputes. You must accept and comply with the payment processor's applicable agreements and provide the customer service and refunds for your program. InRoll is not a party to the sale between you and a family. If in-app purchases are introduced in the future, Apple and/or Google may also process those purchases under their own terms.

InRoll's fees. InRoll's fees for the Service, if any, are as agreed with your Organization or as communicated in the product before you incur them. Any feature that carries a fee will state it before you commit to pay. InRoll may introduce or change its fees with reasonable advance notice. InRoll's fees on a payment are earned when the payment is processed and are not returned if the payment is later refunded, in whole or in part; the payment processor's own fees on refunded payments are governed by its terms. Specific fee amounts and structure are stated where you agree to them, not in this Agreement.

7. Service levels and support

InRoll aims to keep the Service available and to provide reasonable support, but InRoll does not commit to any uptime percentage or guaranteed response times. The Service depends on multiple third-party cloud and communications providers, and unintended downtime can result from provider outages, internet connectivity problems, carrier and communication failures, and similar causes outside InRoll's control. InRoll will use commercially reasonable efforts to keep the Service functioning, but does not guarantee availability, and, to the fullest extent the law allows and consistent with Sections 11 and 12, is not liable for negative impacts caused by such downtime. InRoll may perform maintenance and may need to take the Service down temporarily, and aims to give advance notice of planned downtime that is likely to affect you. Support: [email protected].

8. Confidentiality

Each party will protect the other's non-public business information disclosed under this Agreement and use it only for the relationship. Organization Data is your confidential information; InRoll's non-public platform information is InRoll's.

9. Ownership; feedback

You keep all rights in Organization Data. InRoll keeps all rights in the Service and its software. If you give InRoll feedback or suggestions, InRoll may use them without obligation to you. InRoll may use aggregated and de-identified data that does not identify you, any family, or any participant to operate and improve the Service; health information and biometric data are excluded from any such use.

10. Term, termination, and data export

• Term. This Agreement runs while you use the Service.
• Termination. Either party may terminate at any time with notice. InRoll may suspend the Service to protect people or the platform.
• Data export. Before deletion, you may export your Organization Data using the export features available in the Service or by requesting an export from InRoll at [email protected].
• Deletion after termination. After termination or on your request, InRoll will delete Organization Data under the retention rules in the Privacy Policy: a soft-delete window (currently 60 days) before permanent deletion, or an Organization purge on request, except where law requires retention. You are responsible for exporting anything you need to keep, including records you must retain by law, before deletion.

11. Warranties and disclaimers

Each party has authority to enter this Agreement. Otherwise the Service is provided "as is" and "as available," and, to the fullest extent the law allows, InRoll disclaims all warranties not expressly stated, including implied warranties of merchantability, fitness for a particular purpose, and non-infringement. InRoll uses commercially reasonable administrative and technical safeguards to protect information (see the Privacy Policy's security section), but no security measures are guaranteed to be effective, and InRoll does not warrant that information, including health information, will be immune from unauthorized access. InRoll does not verify the accuracy of Organization Data, and what the Service displays and computes depends on it; InRoll does not warrant that displayed or computed information (including rosters, schedules, balances, eligibility, and health information) is accurate, complete, or current. Features that assist or automate, including AI-assisted import and drafting, produce suggestions for your review, and InRoll does not warrant their output. InRoll is not responsible for your program, your decisions, or the acts of your staff or families.

12. Limitation of liability

To the fullest extent the law allows: neither party is liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, lost revenue, lost registrations or donations, lost goodwill, or business interruption. InRoll is not liable for any losses or damages arising from unavailability, downtime, outages, interruptions, data loss, or failure to process or store data; from inaccurate, incomplete, or out-of-date information displayed or computed by the Service, or reliance on it; from messages not delivered (including email, text, and app notifications); from payment processing, including processor unavailability and declined, failed, delayed, or misrecorded charges, payouts, or refunds, and any inability to collect payments through the Service; or from unauthorized access to, or unauthorized acquisition, use, or disclosure of, information (including health information) resulting from a compromise of security; in each case regardless of cause, including third-party provider failures, internet or communications failures, and InRoll's own acts, omissions, errors, and accidents, including ordinary negligence. This exclusion does not apply to InRoll's gross negligence or willful misconduct. InRoll's total liability under this Agreement is capped at US$100. Nothing in this Agreement limits liability that cannot be limited by law.

13. Indemnification

You (the Organization) will indemnify InRoll against claims, including claims brought by participants, families, or your staff, and including reasonable defense costs, arising from your program, your use of the Service, your Organization Data, your lack of a lawful basis or required consents (including parental and face-matching consents and the accuracy of consents you record), the accuracy of your pickup and blocked-person lists, and your breach of this Agreement or of law.

14. Disputes and governing law

Unless explicitly stated otherwise, this Agreement is governed by the laws of the State of Washington. Disputes under this Agreement are resolved in the state or federal courts located in King County, Washington. InRoll expects that it may adopt arbitration for disputes in the future; any such change will be made by updating this Agreement and will take effect only after notice and your renewed acceptance.

15. General

This Agreement and the referenced Privacy Policy (including the Consumer Health Data Privacy Policy) are the entire agreement between InRoll and the Organization about the Service and supersede prior discussions. Individuals acting for the Organization are also bound by the end-user Terms of Service for their own use of the Service; this Agreement governs the business relationship between InRoll and the Organization, and in a direct conflict about that relationship this Agreement controls. Changes must be in a writing or an in-product acceptance. If a part is unenforceable, the rest stays in effect. Sections that by their nature should continue (including Sections 8, 9, 11, 12, 13, and 14) survive the end of this Agreement. Neither party may assign without the other's consent, except to an affiliate or successor.

16. Contact

Account questions: [email protected]. Legal notices: [email protected].

This Agreement is provided by INROLL LLC, a Washington limited liability company. Last updated: August 24, 2026.