Privacy Policy

Operated by Dynamite Advertising

1. Who We Are

Dojo Partner is a business management platform built for martial arts academies, operated by Dynamite Advertising (“we,” “us,” “our”). We provide software tools for academy operators, their staff, and their members. This policy explains what data we collect, how we use it, and your rights.

2. Who This Policy Covers

This policy applies to three groups of people who interact with Dojo Partner:

• Operators — academy owners and agency administrators who purchase and configure a Dojo Partner account.
• Members — students, clients, and other individuals whose information is entered into the platform by an Operator, or who create an account to access member-facing features.
• Staff — instructors, administrators, collaborators, and other personnel whose information is managed within the platform by an Operator.

3. What We Collect and Why

3.1 Operator account data. When you create a Dojo Partner account: name, email address, business name, billing information (processed by a third-party payment processor — we do not store card numbers), and business settings you configure. Used to operate, support, and bill your account.

3.2 Contact and member data. Information Operators enter about their contacts, leads, and members: name, phone, email, address, enrollment and progress status, attendance records, membership tier, form submissions, booking history, and notes. Used to provide the features the Operator has configured for managing and communicating with their contacts and members.

3.3 Staff data. Information about staff members managed within the platform: name, email, phone, role, schedule and attendance-related records, performance-related records, and records associated with any automated or AI-assisted features made available to staff. Used to provide staff scheduling, performance tracking, and related features the Operator has configured.

3.4 Usage data. Device type, browser, IP address, pages visited, features used, and error logs. Used to operate, secure, and improve the platform. Not sold or shared with advertisers.

3.5 Communications. Messages sent through the platform, including through any automated or AI-assisted features. Message content is stored to provide conversation history and audit trails.

3.6 Conversations with automated features. Where automated or AI-assisted features are available on your account, conversations with those features are stored per user. Used to maintain conversation context across sessions and improve the quality of responses within your account. Not used to train AI models.

3.7 Payment and transaction data. Records of membership payments, product purchases, and booking fees processed through the platform. Our payment processor processes card data directly — we receive only transaction metadata (amount, status, and a transaction reference).

4. Data We Do Not Collect

• We do not collect biometric data (fingerprints, facial recognition).
• We do not collect precise real-time location data.
• We do not collect government identification numbers.
• We do not sell your data to advertisers or third parties for marketing purposes.
• We do not use your data to train AI models.

5. How We Use Data

We use data collected to:

• Operate, maintain, and improve the Dojo Partner platform
• Provide the specific features the Operator has configured for their account
• Send transactional communications (confirmations, receipts, account access links)
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

We do not use your data for advertising targeting or sell it to data brokers.

6. Data Roles: Controller and Processor

For operator, member, and staff data, the Operator (the academy) is the data controller — they determine the purpose and means of processing within their account. Dojo Partner (Dynamite Advertising) is the data processor — we process data on the Operator's behalf according to their configuration and this policy.

Operators are responsible for:

• Obtaining appropriate consent from their members and staff before entering their data into the platform
• Informing staff that performance and attendance-related data is collected within the platform
• Complying with applicable privacy laws in their jurisdiction

7. Data Sharing

We share data only with:

• Service providers necessary to operate the platform, including providers of cloud infrastructure and identity/authentication services, payment processing, business communications (such as email and text messaging), and AI or automation services. Each receives only the information necessary to perform its function and operates under its own privacy policy and data processing agreements. A list of current service providers is available on request.
• Legal authorities when required by law, court order, or to protect the safety of any person.
• The Operator — data about their members and staff is accessible to the Operator who configured the account.

We do not share data with advertising networks, data brokers, or other third parties for commercial purposes.

8. Data Retention

• Operator account data: Retained while the account is active and for 90 days after closure, then deleted on request.
• Contact and member data: Retained as configured by the Operator. Operators may delete member records at any time from within the platform.
• Staff data (employment records): Retained for 2 years after a staff member is removed from an account, then deleted. Operators may request earlier deletion.
• Conversation history with automated features: Retained for 12 months from the last message, then automatically deleted.
• Other platform communications: Retained for 2 years, then deleted.
• Billing records: Retained for 7 years for tax and legal compliance.

9. Children's Privacy

Dojo Partner is not directed to children under 13. If an Operator enrolls minors as members (common for youth martial arts programs), the Operator is responsible for obtaining parental or guardian consent. We recommend Operators add a date-of-birth field to their member profiles. Certain automated or AI-assisted features are not made available to members identified as under 13. If you believe a child under 13 has been enrolled without appropriate consent, contact us at support@dojopartner.com.

10. Security

We use industry-standard security measures including encrypted data transmission (TLS), encrypted database storage, role-based access controls, and regular security reviews. No system is perfectly secure. If you discover a security vulnerability, please contact us at support@dojopartner.com.

11. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Data portability

To exercise these rights, contact your academy operator (they control your data within their account) or contact us directly at support@dojopartner.com. We will respond within 30 days.

For California residents: we do not sell personal information as defined under CCPA. For EEA/UK residents: our lawful basis for processing is legitimate interests (operating the platform) and contract performance.

12. Changes to This Policy

We will notify operators of material changes by email or in-app notification at least 14 days before the change takes effect. Continued use of the platform after changes constitutes acceptance.

13. Contact

Dynamite Advertising
Email: support@dojopartner.com
For data requests: support@dojopartner.com