How Dendrition handles academy information.
Last updated October 5, 2026. Dendrition is operated by North Construct LLC. This page explains the information used to run academy libraries, member access, billing, security, and support.
Who we are and how to contact us
North Construct LLC operates Dendrition. For privacy questions, rights requests, security concerns, or other platform notices, contact james@northconstruct.com. Gym members should also contact the academy that invited them because the academy controls its roster and member access.
Information we collect
North Construct LLC collects the information needed to operate Dendrition, including names, email addresses, academy details, roles, gym-member access records, programs, lesson media, captions, support communications, security and audit records, device and usage information, and academy billing records. Depending on the deployment and provider, technical information may include IP address, browser and operating-system details, referrer, URLs, approximate location, performance measurements, and video-playback events. Stripe handles payment-card details; Dendrition does not store complete card numbers.
Where information comes from
We receive information directly from the person using Dendrition, from the academy that creates or manages access, from identity and billing providers, from service providers that host or secure the product, and automatically from the browser or device when the service is used. An academy may provide a member's name, email, role, access status, or media as part of its ordinary operation of the academy library.
How we use information
We use information to authenticate people, provision academies, organize and deliver private curriculum, manage academy membership access, process academy subscriptions and taxes, send transactional product messages, secure and troubleshoot the service, monitor reliability and performance, prevent abuse, meet legal obligations, and respond to support or privacy requests. We do not use academy or member information to train advertising profiles or sell access to a person's viewing history.
Academy responsibilities and minors
The academy decides whom to invite, which content to publish, and when member access begins or ends. The academy must provide required notices and obtain legally required participant, parent, or guardian consent before adding a minor or uploading media that identifies a minor. North Construct uses that information to provide and protect the academy service and to meet applicable legal obligations; the academy remains responsible for its instructions and permissions.
Who can see information
Authorized academy owners and instructors can see the gym members, programs, and library access connected to their academy. Members can see their own account and the published library for academies where they have active access. North Construct operators use restricted support access when needed to run, secure, or recover the service.
Cookies, analytics, and playback telemetry
Dendrition uses essential cookies and similar storage for authentication, security, and interface preferences. Current preference cookies include dendrition-theme for theme selection and sidebar_state for workspace navigation state. On the production public marketing pages, Vercel Analytics may receive page-view and device information, a known AI referral source label, and demo-email link interest. Custom attribution uses no account identifiers or persistent browser storage, drops URL queries and fragments, and honors browser Global Privacy Control and Do Not Track signals. A demo-email click does not confirm a trial or sent message. Vercel Speed Insights may receive real-user performance measurements. Mux Data may receive video-playback telemetry when it is configured for a deployment, including a viewer account identifier, video identifier and title, and lesson/player events used for diagnostics. We treat identifiable video-viewing history as personal information and disclose it only as needed to deliver, secure, troubleshoot, or support the academy service, or as required by law. We may use aggregated or deidentified viewing information to improve the service. We do not use these tools for cross-context behavioral advertising, and we do not place advertising trackers on the service.
Service providers and disclosures
We use service providers including Vercel for hosting, product analytics, and performance insights; Better Stack for privacy-filtered runtime log search; Neon for application data and Dendrition-owned authentication records; Mux for private video processing, delivery, and playback telemetry when enabled; Resend for account invitations, recovery, security notices, and transactional product email; Google Workspace for support, legal notices, and business communications; and Stripe for academy billing, tax calculation, and provider-native billing messages. These providers process information to provide their services under their contractual and security terms. We may also disclose information when required by law, as part of a lawful merger, acquisition, financing, reorganization, bankruptcy, or sale of relevant assets, or to protect people, rights, and the service.
No sale or targeted advertising
North Construct does not sell personal information and does not share personal information for cross-context behavioral advertising. We do not use personal information for targeted advertising. We do not knowingly accept under-13 accounts, and we do not monetize member identities, academy rosters, or video-viewing histories through data sales. If these practices change, we will update this policy and provide any choices required by applicable law before the change takes effect.
Children under 13
Dendrition is not directed to children under 13 and does not knowingly accept or maintain accounts for children under 13. We do not currently offer a parental-consent workflow. Academies must not create an account for a child under 13 or direct a child under 13 to submit personal information. If we learn that an account holder is under 13 or that a child under 13 submitted personal information directly, contact james@northconstruct.com; we will promptly disable the account or affected submission and delete the information unless applicable law requires retention. This account rule does not prohibit an authorized adult from uploading academy content that depicts a child when the academy has all legally required rights, notices, and participant, parent, or guardian permission.
Retention and deletion
We retain account, profile, membership, and access information while an account or academy relationship is active and for as long as needed to provide, secure, and support the service. Academy content is retained while the academy uses the library or until the academy requests removal, subject to the order form and operational needs. Billing, tax, security, audit, support, and legal records may be retained for the period required to meet financial, legal, dispute, fraud-prevention, and safety obligations. When information is deleted from active systems, encrypted backups and provider retention cycles may preserve limited copies for a period; those copies are not used to provide ongoing access. We do not promise immediate deletion where retention is legally or operationally required, except that applicable law may require earlier deletion.
Privacy rights and requests
Depending on where you live and applicable law, you may have rights to access or know about personal information, correct it, delete it, receive a portable copy, restrict or object to certain processing, opt out of sale, sharing, or targeted advertising, use an authorized agent, appeal a denied request, and receive equal service. We do not currently sell or share personal information for targeted advertising, but we honor legally applicable universal opt-out preference signals, including Global Privacy Control, for activities to which they apply. To make a request, email james@northconstruct.com with the academy name, the email associated with the account, and the request type. We may verify your identity and authority before responding; do not send passwords or full payment-card numbers. We respond within the deadlines required by applicable law. Members may also ask their academy to begin an access or deletion request.
US operations
The initial Dendrition customer offering is limited to academies operating in the United States. Information may be processed by providers in the United States and other locations where those providers operate, subject to their safeguards and applicable law.
Security
We use reasonable technical and organizational safeguards, including managed identity, academy-scoped access checks, private video delivery, provider-signature checks, audit trails, and restricted operational access. No online service can guarantee perfect security, so users must protect sign-in details and promptly report suspected misuse.
Policy changes
We may update this policy as Dendrition, its providers, or legal requirements change. We will update the date on this page and use appropriate notice for material changes affecting an active academy customer. We will not silently use existing personal information for a materially different purpose without updating this notice and providing any legally required choice.