Privacy Policy

Version 1.1 · Effective 28 July 2026

This policy explains how Torq360 LLC, a Wyoming limited liability company ("we", "us"), operator of the BeltRise platform, handles personal data. BeltRise is software used by martial-arts clubs to run their membership, grading, attendance, communications and safeguarding records.

Two roles. For the member, student, guardian and staff records a club enters into BeltRise, the club is the data controller and Torq360 acts as its data processor, processing that data only on the club's instructions under our Data Processing Agreement. For the club's own account and contact data, and for enquiries submitted to us directly, Torq360 is the controller. If you are a member, student or parent, please contact your club about your data; we will support the club in responding.

1. Data we collect

From clubs and account users: name, email, phone, login credentials (stored securely), club details, and billing information processed through our payment provider (we do not store full card numbers).

Member and student records that clubs enter (as processor): name, date of birth, contact details, guardian and emergency-contact details, grading and attendance records, membership and license details, and, where the club chooses to record it, health/medical and safeguarding information (special-category data) and member photographs, which may include children.

Automatically: basic technical and usage data (such as log data and activity within the Service) used to operate, secure and improve the platform.

2. How we use data

We use account and contact data to provide, secure, support and bill for the Service, to communicate with clubs about the Service, and to comply with law. We process member and student records only to provide the Service to the club on its instructions. We may generate and use aggregated or de-identified account and usage telemetry (for example, feature-usage and performance statistics) that does not identify any individual to operate, secure and improve BeltRise; we do not repurpose members' personal records for our own purposes. We do not sell personal data, we do not use member or student data for our own advertising, and we do not use it to train AI models.

3. Children's data

BeltRise is a tool used by clubs that may train children. Children may interact with BeltRise directly through a member portal their club provides (for example a training diary or quizzes), but always under their club's account and control, and not through a consumer service marketed to children. Most children's data enters BeltRise because a club records it to run its club. The club is responsible, as controller, for having the appropriate legal basis and for obtaining any parental or guardian consent required by law (such as COPPA in the US, or UK/EU GDPR where applicable) before entering or enabling a child's data. We provide security and processing controls to support the club in protecting that data. If you believe a child's data has been provided to a club in error, contact the club, or contact us at [email protected] and we will assist the club.

4. Sub-processors we use

We use a small number of trusted providers to run the Service:

Supabase: database, authentication and file storage (hosting of member data).
Cloudflare: application hosting, content delivery and security.
Stripe: payment processing (card data is handled by Stripe; we do not store full card numbers).
Anthropic: AI features (for example, drafting a syllabus from a document you upload, and the in-app assistant). Data sent for AI features is not used to train models.

We require sub-processors to protect data consistent with this policy and our Data Processing Agreement, and we keep this list current.

5. Sharing

We share data only with the sub-processors above to run the Service, where required by law or to protect rights and safety, and with a successor in the event of a merger or acquisition (subject to this policy). We do not sell personal data.

6. Security

We use technical and organizational measures appropriate to the risk, including access controls, database row-level security isolating each club's data, encryption in transit and at rest, regular backups, and restricted administrative access. No system is perfectly secure, and clubs are responsible for their own account security and for the access they grant within their club. To report a security concern, contact [email protected].

7. Retention

We keep account data for as long as the account is active and as needed to provide the Service and meet legal obligations. Member and student records are kept on the club's instructions. On termination of an account, the club may export its data for 30 days, after which we delete or de-identify it (backups roll off on their normal cycle shortly thereafter), except where longer retention is required by law.

8. International transfers

We are based in the United States and our providers may process data in the US and other countries. Where personal data of individuals in the UK or EU is transferred internationally, we rely on appropriate safeguards required by applicable law, including the EU Standard Contractual Clauses and the UK International Data Transfer Addendum, as set out in our Data Processing Agreement.

9. Your rights

Depending on where you are, you may have rights to access, correct, delete, export or restrict the use of your personal data, and to object to certain processing. If you are a member, student or parent, exercise these rights through your club (the controller); we will help the club respond. Account users can contact us directly at [email protected].

10. Cookies

The Service uses cookies and similar technologies necessary to sign you in and operate the platform. We do not use them for third-party advertising.

11. Changes

We may update this policy and will post the updated version with a new date; material changes will be notified as required.

12. Contact

[email protected]. Torq360 LLC, 30 N Gould St, Ste N, Sheridan, WY 82801, USA.