Privacy Policy

Last updated: May 27, 2026

This Privacy Policy describes how NMAO Inc. ("NMAO," "we," "us," or "our") collects, uses, and shares information when you use the NMAO platform and related services (the "Service"). We respect your privacy and are committed to handling your information responsibly.

NMAO operates a multi-tenant software platform used by martial arts schools ("Schools") to manage their operations. When you use the Service as an End User—a student, parent, guardian, or other person enrolled at or interacting with a School—both NMAO and the School may act as data controllers of your information for different purposes, as described below.

Information We Collect

We collect the following categories of information:

Information you provide

• Identity and contact: name, date of birth, email address, mailing address, phone number;
• Account credentials: email or other identifier used for authentication; we use magic-link sign-in and do not store passwords for End User accounts;
• School membership information: School affiliation, membership type, belt rank, instructor, attendance records, session packs, and similar enrollment data;
• Family relationships: for minors, the name and contact information of the parent or guardian who authorizes the minor's participation;
• Communications: messages you send to your School or to NMAO support, including SMS replies and email correspondence;
• User content: profile photos, notes, and other content you submit to the Service;
• Emergency contact and medical/notes information: if your School collects this for safety purposes through NMAO-powered forms.

Payment information

When you make a payment through the Service, payment card details are collected and processed directly by Stripe. NMAO does not store full card numbers or CVV codes. We receive limited payment metadata (such as the last four digits of the card, brand, expiration, and transaction status) from Stripe to display in your account history and for billing administration.

Information collected automatically

• Device and connection: IP address, browser type, device type, operating system, and similar technical metadata;
• Usage: pages visited, features used, timestamps, and similar interaction data;
• Cookies and local storage: we use cookies and browser local storage to maintain your authenticated session, remember preferences, and operate the Service. We do not use third-party advertising or behavioral tracking cookies.

How We Use Information

We use the information we collect to:

• Operate, maintain, and provide the features of the Service;
• Process payments and manage memberships, classes, and account activity on behalf of your School;
• Send transactional communications (SMS reminders, payment receipts, attendance confirmations, magic link sign-in emails);
• Respond to your requests and provide customer support;
• Detect, investigate, and prevent fraud, abuse, and security incidents;
• Comply with legal obligations;
• Improve and develop the Service.

We do not sell your personal information, and we do not use your information for cross-context behavioral advertising.

How We Share Information

We share information in the following limited circumstances:

With your School

The School you are affiliated with has access to your account information, attendance records, payment history, and any other data you submit through the Service. The School uses this information to operate its business and serve you. The School is a separate data controller of this information and applies its own policies in addition to ours.

With service providers (subprocessors)

We share information with trusted third-party service providers that help us operate the Service. These providers are bound by contract to handle information only as needed to provide their services. Key subprocessors include:

For legal reasons

We may disclose information if required by law, subpoena, court order, or other valid legal process, or when we believe disclosure is necessary to protect our rights, your safety, the safety of others, or to investigate fraud or security incidents.

In connection with a business transfer

If NMAO is involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred to a successor entity. We will notify affected users via email or through the Service if a transfer materially affects how your information is handled.

SMS Communications

When you provide your mobile phone number and opt in to receive SMS messages — through a School's enrollment form, a member portal opt-in, the lead-generation kiosk, in-person enrollment with documented verbal consent, or by texting an opt-in keyword (such as JOIN, START, YES, or SUBSCRIBE) to your School's NMAO number — you consent to receive operational text messages from your School delivered via the NMAO platform.

Types of messages

SMS messages sent through NMAO are operational and customer-care focused, not promotional. They may include:

• Class confirmations, reminders, and schedule changes;
• Attendance check-in confirmations and absentee follow-ups;
• Payment receipts, billing reminders, and payment failure notifications;
• Account and membership status updates;
• Belt test, event, and tournament notifications;
• Two-way confirmation prompts (e.g., to confirm or cancel a scheduled session);
• Milestone and customer-care messages (e.g., birthday acknowledgments from your School).

NMAO does not use SMS for marketing, advertising, or promotional content on behalf of third parties.

Message frequency and rates

Message frequency varies based on your enrollment activity and your School's communication practices — typically a few messages per month, with more during busy periods such as events or belt-test weeks. Standard message and data rates may apply per your wireless carrier's plan. Carriers are not liable for delayed or undelivered messages.

Opt-out and help

You may opt out of SMS at any time by replying STOP, STOPALL, UNSUBSCRIBE, CANCEL, END, or QUIT to any message. Opt-out is immediate. For help, reply HELP, INFO, or SUPPORT to any message, or contact your School directly. You may re-subscribe at any time by replying START or by contacting your School.

How SMS opt-in data is handled

We do not sell, rent, lease, share, or otherwise disclose your mobile phone number, SMS opt-in status, or related consent information to any third party for marketing or promotional purposes. SMS opt-in data is used only to deliver the operational messages you have consented to receive, and is shared only with the service providers necessary to operate the messaging service — principally Twilio, our SMS delivery provider, which is bound by contract to handle this information only on our behalf and in accordance with our instructions. SMS opt-in data is not used for cross-platform advertising, behavioral tracking, or any purpose unrelated to delivering the messages you have requested.

Data Retention

We retain information for as long as your account is active and as needed to provide the Service. After account closure, we may retain certain information for a reasonable period to comply with legal obligations, resolve disputes, enforce agreements, maintain payment and tax records, or support legitimate business interests. Specific retention periods vary by data category; contact us at support@nmao.us for details.

Your Rights and Choices

Depending on where you live, you may have rights regarding your personal information, including:

• Access: request a copy of personal information we hold about you;
• Correction: request that we correct inaccurate or incomplete information;
• Deletion: request that we delete personal information, subject to limited exceptions (e.g., legal recordkeeping);
• Communications opt-out: opt out of SMS by replying STOP to any message; opt out of non-essential emails via the unsubscribe link in those emails;
• Account closure: request to deactivate or delete your account.

To exercise these rights, contact your School directly or email us at support@nmao.us. We may need to verify your identity before fulfilling a request. Some information must be retained for legal or operational reasons even after deletion of an account.

Children's Privacy (COPPA)

NMAO is intended for use by adults and by minors enrolled at a participating School with verifiable parental or guardian consent. We do not knowingly collect personal information directly from children under 13 without such consent.

When a School enrolls a minor through NMAO, the School is responsible for obtaining and documenting parental or guardian consent for the collection and use of the minor's information, in compliance with the Children's Online Privacy Protection Act (COPPA) and applicable state laws. NMAO acts as a service provider to the School in handling the minor's information and uses it only to provide the Service.

A parent or guardian may:

• Review the personal information NMAO holds about their child;
• Request that NMAO update or delete the child's personal information;
• Refuse to permit further collection or use of the child's information (which may result in the child no longer being able to use the Service).

To exercise these rights, contact the School your child is enrolled at, or email support@nmao.us. We will work with the School to verify the parental relationship and respond to the request.

Security

We use reasonable administrative, technical, and physical safeguards to protect your information, including encryption of data in transit (HTTPS/TLS), encryption at rest where supported by our infrastructure providers, access controls, and authentication via short-lived magic links rather than long-lived passwords. However, no method of transmission or storage is completely secure. We cannot guarantee absolute security, and you use the Service at your own risk.

California Residents

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information, including the right to know what categories of personal information we collect, the right to request deletion, the right to correct inaccurate information, and the right to non-discrimination for exercising these rights. We do not sell personal information and do not engage in cross-context behavioral advertising. To exercise your CCPA rights, contact us at support@nmao.us.

International Users

The Service is operated from the United States and is intended for users in the United States. If you access the Service from outside the U.S., your information will be transferred to, stored, and processed in the United States. By using the Service, you consent to such transfer and processing.

Cookies and Tracking

We use cookies and browser local storage for essential purposes only: maintaining your authenticated session, remembering interface preferences, and operating the Service. We do not use cookies for advertising or cross-site behavioral tracking. Most browsers allow you to control cookies through their settings, but disabling cookies may impair the functionality of the Service.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or through the Service and update the "Last updated" date at the top of this page. Your continued use of the Service after such changes constitutes acceptance of the updated Policy.

Contact Us

Questions, requests, or concerns about your privacy or this Policy? Contact us at: