Privacy Policy
Last updated: October 13, 2026
This policy explains what personal data the Renzo Gracie Online Academy collects, why, who helps us process it, and your rights. We keep it short because we collect little: the site has no advertising and no tracking scripts.
1. Who is responsible
For members buying in Brazilian reais, the controller under Brazil's LGPD is Samurai Jiu-Jitsu Ltda, CNPJ 57.590.954/0001-19, Av. Mario Theophilo Guerra, 11, São Pedro da Aldeia, RJ, 28940-880, Brasil. For all other members it is Gallerr Inc, mailing address 246 Columbus Ave, New York, NY 10023, USA.
Privacy contact (including the LGPD data protection contact, "encarregado"): support@renzogracie.online.
2. What we collect
- Account: your email address, and the language you use on the site.
- Membership: plan, status, renewal dates and the Stripe customer and subscription references. Card details are handled by Stripe, never by us.
- Training activity: lessons you watched, completed and where you stopped, so we can show your progress and resume videos.
- If you were a member of the previous Renzo Gracie Online platform: the lessons you had watched there, which we brought over so your progress continues.
- Academy pass: if you train at a participating Renzo Gracie academy, whether your email belongs to an active member there.
- Technical data: IP address, approximate country (used to show prices in your currency), browser and device information in server logs.
- Messages you send us.
3. Why we use it
- To provide the membership you asked for: sign-in, access, progress, billing (performance of contract).
- To keep the service secure and working, and prevent fraud and account sharing (legitimate interest).
- To send service emails: sign-in links, receipts, renewal and account notices.
- To send news about the Academy. You can unsubscribe from these at any time using the link in each email.
- To meet legal obligations, such as tax and accounting records.
We don't sell your personal data and don't share it for advertising.
4. Who processes it for us
We use these service providers, each only for its task:
- Supabase: database and sign-in.
- Vercel: website hosting.
- Stripe: payments and subscriptions.
- Vimeo: video hosting and the video player. Vimeo processes viewing data under its own privacy policy and may set cookies in the player.
- Resend: sending our emails.
- Voyage AI: turns the text of a search into a form our search can compare. Only the search text is sent, not who searched.
- Cloudflare: domain and DNS.
- Google Workspace: our support mailbox.
- Kiso Academy: the membership system of the participating Renzo Gracie academies, which confirms whether an email belongs to an active academy member for the academy pass.
Most of these providers are in the United States, so data may be transferred and stored there, with safeguards required by applicable law.
5. Cookies
We only use cookies needed for the site to work: one keeps you signed in, one remembers your language. Stripe's checkout page and Vimeo's video player may set their own cookies under their policies. We use no advertising or analytics cookies.
6. How long we keep it
We keep your account and training data while your account exists. Billing records are kept for as long as tax and accounting law requires. If you ask us to delete your account, we delete your personal data within 30 days, except what the law requires us to keep.
7. Your rights
You can ask us to confirm what data we hold, give you a copy, correct it, delete it, or stop using it for news emails. Brazilian residents have the rights in art. 18 of the LGPD; California residents have the rights of the CCPA, and we don't sell or share personal data as defined there. Write to support@renzogracie.online; we answer within 15 days. You can also complain to your data protection authority (in Brazil, the ANPD).
8. Children
The Academy is for people aged 18 and over. We don't knowingly collect data from children.
9. Security
Access to personal data is restricted to the people and providers who need it, data is encrypted in transit, and sign-in uses one-time links instead of passwords that could leak. No system is perfectly secure; if a breach affects you, we tell you as the law requires.
10. Changes
We may update this policy. The date at the top shows the latest version; for important changes we notify members by email.