Privacy Policy

MartialArts.io ("we", "us", or "our") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights regarding your data.

We comply with the General Data Protection Regulation (GDPR) for EU users and the California Consumer Privacy Act (CCPA) for California residents.

1. Who We Are

2. What Information We Collect

Account Information: When you register, we collect your name, email address, and password.

School Data: If you run a martial arts school, you may store student names, contact information, attendance records, belt ranks, and payment history.

Payment Information: Payment details are processed securely by Stripe. We do not store your full credit card number.

Technical Data: We automatically collect IP addresses, browser type, and access times for security and troubleshooting.

3. How We Use Your Information

• To provide and maintain our service
• To process payments and send receipts
• To send important service updates
• To respond to your support requests
• To protect against fraud and abuse

We do not sell your personal information. We do not share your data with third parties for marketing purposes.

4. Cookies

We only use essential cookies required for the website to function:

• Session cookie - Keeps you logged in
• CSRF token - Protects against cross-site attacks
• Cloudflare cookies - Security and bot protection

We do not use analytics, advertising, or tracking cookies. No cookie consent banner is required because we only use essential cookies.

5. Service Providers

We use trusted third-party services to operate our platform. All have signed data processing agreements:

• Fly.io - Application hosting and database
• Amazon Web Services (AWS) - File storage
• Cloudflare - Security and content delivery
• Stripe - Payment processing
• Mailgun - Email delivery

6. Data Security

We protect your data with:

• HTTPS encryption on all connections
• Encrypted database storage
• Secure password hashing (bcrypt)
• Rate limiting to prevent attacks
• Regular security updates

7. Your Rights

You have the right to:

• Access - Request a copy of your personal data
• Export - Download your data in a machine-readable format (JSON)
• Correct - Update inaccurate information in your account settings
• Delete - Request deletion of your account and data
• Unsubscribe - Opt out of marketing emails at any time

To exercise these rights, use the "Export My Data" feature in your account settings or contact us at [email protected].

8. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to keep records for legal or tax purposes.

9. For Business Customers (Schools)

If you operate a martial arts school using MartialArts.io:

• You are the Data Controller for your students' data
• We are the Data Processor acting on your behalf

Our Data Processing Agreement (DPA) is incorporated into our Terms of Service. We commit to:

• Process data only on your instructions
• Maintain confidentiality
• Implement appropriate security measures
• Assist with data subject requests
• Delete data when you close your account

Need a standalone DPA document? Contact [email protected].

10. For EU Users (GDPR)

Under the General Data Protection Regulation, you have additional rights:

• Legal basis: We process your data to perform our contract with you (providing the service)
• Data portability: Export your data in JSON format from your account settings
• Right to object: You can object to processing by contacting us
• Supervisory authority: You have the right to lodge a complaint with your local data protection authority

We do not use automated decision-making or profiling.

11. For California Residents (CCPA)

Under the California Consumer Privacy Act, you have the right to:

• Know what personal information we collect and how we use it
• Delete your personal information
• Opt-out of the sale of your personal information
• Non-discrimination for exercising your privacy rights

We do not sell your personal information. We have not sold personal information in the past 12 months.

To exercise your California privacy rights, contact us at [email protected] or call +1 (805) 312-8884.

12. Email Communications

We may send you:

• Transactional emails: Account confirmations, password resets, receipts (required for service)
• Product updates: New features and important changes
• Marketing emails: Tips and promotions (you can unsubscribe anytime)

Every marketing email includes an unsubscribe link. You can also manage preferences in your account settings.

13. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. Your continued use of the service after changes constitutes acceptance of the updated policy.

14. Contact Us

Questions about this privacy policy or your data?