Last updated: July 2026
Compteam is a SaaS platform for BJJ gym management, operated by a private individual resident in Andorra. For questions about this policy, contact us at info@compteam.io.
Because the operator is established in Andorra, the personal data we handle is governed primarily by Andorran law — Llei 29/2021, qualificada de protecció de dades personals (LQPD) — which is closely aligned with the EU GDPR (Andorra benefits from an EU adequacy decision and is a party to Convention 108+). Where this policy cites GDPR articles, the equivalent LQPD provisions apply.
When you create a Compteam account (as a branch admin or athlete), we collect your email address, name, and any profile information you provide. We use this to operate your account and deliver the service. Legal basis: Art. 6(1)(b) GDPR — performance of a contract.
Subscription payments are processed by Stripe. We store your subscription status and plan tier. Card numbers and payment details are held exclusively by Stripe. Legal basis: Art. 6(1)(b) GDPR.
When you buy a Compteam supporter T-shirt, Stripe processes your payment, selected size and quantity, delivery address, contact details, tax, and shipping information. Compteam may use the order details Stripe makes available to us to fulfil the order manually, provide support, and keep required accounting records. Legal basis: Art. 6(1)(b) GDPR.
Gyms (branch admins) are the data controllers for the personal data of their athlete members — names, dates of birth, training records, belt history, competition results, and billing mandates. Compteam processes this data as a data processor under Art. 28 GDPR on behalf of the gym. See our Data Processing Agreement.
Some of this data may be entered by your gym rather than by you directly (for example when a coach imports an existing roster). Where your data was not obtained from you, its source is your gym (LQPD Art. 17).
We use Google Analytics 4 to understand how visitors use the site. Analytics cookies are only set after you give consent via the cookie banner. Legal basis: Art. 6(1)(a) GDPR — consent. You can withdraw consent at any time via the footer's Cookie Settings link.
| Sub-processor | Purpose | Location |
|---|---|---|
| Supabase | Database hosting and authentication | EU (Frankfurt) |
| Stripe | Payment processing | EU/US |
| Resend | Transactional and service email delivery | US (transfers under SCCs / EU-US DPF) |
| Anthropic / Google / OpenRouter | AI assistant ("agent mode"), where a gym enables it | US (transfers under SCCs / EU-US DPF) |
| Google Analytics | Anonymised usage analytics (consent-only) | US (data governed by DPF) |
Transfers to US sub-processors rely on appropriate safeguards (Standard Contractual Clauses and/or EU-US Data Privacy Framework participation), recognised under LQPD Articles 42–45.
Under GDPR you have the right to:
To exercise any right, contact info@compteam.io.
Minors: the personal data of a person under 16 is only processed with the consent of their legal representative (LQPD Art. 8). Where a member is under 16, registration is completed through a guardian-consent step.
Account data is retained for as long as your account is active. When you delete your account, your personal data is erased. Where financial records must be kept for statutory accounting obligations, the related data is blocked (frozen and reserved solely for legal claims, not used for any other purpose) for the applicable retention period and then destroyed (LQPD Art. 30). Analytics data is retained per Google Analytics defaults (14 months).
We will notify users of material changes by email. The "last updated" date at the top of this page reflects the most recent revision.