Privacy Policy

Draft — last updated 27 October 2026

This is a draft template, not legal advice. It has not been reviewed by a lawyer. Before you publish it, have it checked for your country (especially EU/GDPR requirements), fill in the blanks marked [ ], and add a real contact address.

1. Who we are

dojo.spot ("we", "us") provides tools for sports clubs: a class schedule editor, a price list, a club profile page, and a directory of verified clubs. This policy explains what personal data we collect, why, and what rights you have.

Data controller: [Your legal name / company name], [address], [contact email].

2. What we collect

Account data: your email address, used to log in via a one-time link (no password is stored).
Club data you enter: club name, bio, schedule, prices, coach names, bios, and photos you upload, contact details (phone, address, social media links), and the content of any banners you add.
Technical data: basic logs needed to operate the service (e.g. error logs), and theme/language preferences stored in your browser.
Verification data: information you submit to prove you manage a club (e.g. a confirmation code posted on your club's social media).

We do not knowingly collect special categories of data (health, etc.) beyond what you choose to put in free-text fields (e.g. a class description). Please avoid entering sensitive personal data about yourself or others in those fields.

3. Why we use it

To create and operate your account and your club's schedule, prices, and page.
To show your club's verified listing on the public map and directory, if and when it is verified.
To communicate with you about your account (e.g. login links, service notices).
To prevent impersonation and keep the directory accurate (verification process).

4. Who we share it with

We use the following processors to run the service:

Supabase (database, authentication, file storage) — [region: specify where your Supabase project is hosted].
[Hosting provider, e.g. Cloudflare Pages] — serves the website.
[Email delivery provider, if/when added] — sends login links and notifications.

We do not sell personal data. Club schedule, price, and profile data you mark as public is, by design, visible to anyone who visits your club's page or the directory.

5. How long we keep it

We keep account and club data for as long as your account is active. If you delete your club or account, we delete the associated data within [X days], except where we are required to keep records for legal reasons (e.g. invoices).

6. Your rights

Subject to applicable law (including GDPR if you are in the EU/EEA), you may have the right to access, correct, delete, or export your data, and to object to or restrict certain processing. To exercise these rights, contact us at [contact email]. You also have the right to lodge a complaint with your local data protection authority.

7. Cookies and local storage

We use your browser's local storage to remember your login session, theme, and language choice. We do not use third-party advertising trackers. If this changes, this policy will be updated.

8. International transfers

Depending on where our hosting and database providers are located, your data may be processed outside your country. Where required, we rely on appropriate safeguards (e.g. standard contractual clauses) — [confirm with your providers' documentation].

9. Children

dojo.spot is intended for club owners, coaches, and administrators, who must be adults. Club pages may mention that classes are offered to children, but we do not knowingly collect personal data directly from children through this service.

10. Changes to this policy

We may update this policy as the service evolves. We will post the updated version here with a new "last updated" date.

11. Contact

Questions about this policy: [contact email].