Privacy Policy

Last Updated: 2026-07-08

MartialStack (“us”, “we”, or “our”) is committed to the privacy of its students, parents/guardians, studio staff members, and all people who use our services. This Policy details and limits which data that we collect, how it can be used, and what controls you can exercise over it. Your use of MartialStack (“Services”) is subject to this Policy. If you do not agree with any part of this Policy, you must not use the Services.

This policy may change from time to time to reflect the needs of our users and growth of the product. If material changes are made, including expanding the types of data collected or the uses of data collected, we will revise the “Last Updated” date at the top of the Policy. All changes to this Policy are effective when they are posted to this page. If you do not agree with the updated Policy, you must cease using our services. Educational providers who have contracted our services will be notified of all material changes to this Policy; any limitations to changes in this Policy outlined in the specific contract will be followed.

1. What Information We Collect

The following information is collected on anyone who visits our web pages or uses our services:

  • Occurrences of bugs, unhandled errors, or operational failures.
  • Service usage information (which pages are visited, which buttons clicked, etc.)
  • General device type, browser, operating system, and geographic region.
  • IP addresses.
  • Referral sources.

The following information is collected on anyone who logs into our services:

  • Your full name, email address, and account profile picture as they are provided by the third party login provider (such as Google or Apple).
  • User-controlled display and accessibility preferences (such as lighting settings).
  • Associations to family groups & student accounts, if any.

The following information is collected on staff who use our services:

  • User-generated messages that are sent on or to the platform.
  • Activity that modifies any student records, such as a belt promotion or modifying an attendance record.
  • Activity that modifies any account permissions or other account attributes.

The following information may be collected on students depending on the settings of the particular studio being used:

  • Full Name.
  • Email address.
  • Phone number.
  • Physical address.
  • Birthday & age.
  • Class attendance records.
  • Belt promotion history.
  • Bout participation records.
  • Family group associations & guardianship.
  • User-generated messages that are sent on or to the platform.
  • Identifiers to link to payment methods on Helcim or other payment provider partner used by the studio.

2. How Information is Used On Platform

We use data that we collect to provide services to you and your studio. Specifically, we use it to:

  • Run the core service — manage accounts, family groups, attendance, belt promotions, bout records, and messaging.
  • Keep the platform reliable and secure — diagnose bugs, errors, and outages, and protect against abuse or unauthorized access.
  • Support and improve the product — understand how the Services are used so we can fix problems and make them better.
  • Communicate with you — send account, service, and support messages related to your use of the platform.
  • Enable studio operations — give studios the records and tools they need to run their business, including linking to their payment provider.

3. How Information Leaves the Platform

  • Students may export their data at any time, including by tools that our services provide.
  • Authorized staff may export student data that they have access to.
  • Occurrences of bugs, unhandled errors, or operational failures may be recorded to authorized US-based third party providers of observability and operations monitoring products, including Sentry (https://sentry.io/) and PagerDuty (https://www.pagerduty.com) in order to provide improved service reliability.
  • Analytics data may be shared with authorized third-party web analytics providers, including PostHog (https://posthog.com/).
  • We may from time to time use anonymized and aggregated data to create public reports or articles.

4. Security and Protection of Your Information

We take the security of personal information seriously and implement industry-standard measures to protect against unauthorized access, disclosure, or misuse of data consistent with applicable law.

As a cloud-native solution, MartialStack utilizes Amazon Web Services as our principal hosting provider with resources located exclusively in the United States. All sensitive data is protected with strong encryption at rest, using industry-accepted algorithms like AES-256. All sensitive data is transferred using encryption in transit.

In the unlikely event of a data breach, MartialStack will notify affected parties without unreasonable delay, and in no event later than 72 hours after confirmation of the incident. Such notices will include any applicable remedial information as is known at the time and follow-ups may further develop that information.

While we strive to protect all personal information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, but we follow best practices to minimize risk.

5. Retention of Your Information

We retain information according to the studio's data retention preferences in order to provide studios with data to help their business.

All data deletion requests are honored within 60 days of request.

6. Other Provisions

  • Marketing and Advertising. We do not display advertisements on our services.
  • Automated Decision Making. We do not use any personal information for automated decision-making in our services, including profiling, in a way that produces legal effects concerning an individual or significantly affecting an individual.
  • Global Privacy Control (GPC) preferences. MartialStack reacts to a Global Privacy Control (GPC) signal by suppressing third-party analytics collection while the signal is present and storing that opt-out preference if the user is logged in.
  • Children Under 13. We do not permit children under 13 to create an account and do not knowingly collect information from a child under 13 unless the child is provided access to our services by the child’s authorized legal guardian.
  • Legal Compliance. We may disclose information to comply with applicable laws, regulations, legal processes, or government requests, or to enforce our terms and agreements, protect the security of our platform, or prevent fraud or harm. If we receive a subpoena or other legal order to disclose information we will endeavor to provide notice of the request to you prior to disclosure, if such notice is permitted by applicable law.
  • Merger, Acquisition, or Change of Control. In the event of a Change of Control event, such as a merger, acquisition, or transfer of assets, the receiving entity would be obligated to follow this Policy or delete data it is unwilling or unable to protect with this Policy.

7. Your Data Rights

All requests to inspect, correct, export, or erase data can be sent to help@martialstack.com.

  • Right to Inspection and Correction. Users have the right to inspect and review records and request corrections to inaccurate records.
  • Right to Export. Users have the right to export all of their data on-platform in a machine-readable format.
  • Right to Erasure. Users have the right to request erasure of their data.

8. Contact Information

If you have any questions or concerns about this Privacy Policy or how we handle personal information, please contact us at: help@martialstack.com