Data Protection

1. Information Governance

We collect information that you voluntarily provide when creating an account, including business names, email addresses, and payment details. Additionally, our system processes data regarding your gym's operations (memberships, attendance, financial records) to provide our management features.

2. Operational Use of Data

Data is used exclusively to facilitate platform functionality, including:

• Generating accurate financial reports and payroll summaries.
• Processing membership payments and renewals.
• Sending automated WhatsApp and email notifications as configured by the administrator.
• Improving platform performance and security protocols.

3. Security Architecture

GymNode employs enterprise-grade security measures. This includes end-to-end SSL/TLS encryption for data in transit and robust database encryption for data at rest. We leverage trusted cloud infrastructure (Supabase/PostgreSQL) to ensure high availability and data integrity. While we maintain rigorous security standards, no electronic storage system is 100% impenetrable.

4. Third-Party Integrations

We partner with specialized service providers to handle specific functions:

• Payment Processing: Handled securely via Lemon Squeezy; your full credit card details never touch our servers.
• Database & Auth: Managed via Supabase for secure identity management and storage.
• Communication: WhatsApp integration facilitated via specialized API gateways.

5. Data Retention & Deletion

Your business data belongs to you. In the event of account cancellation, we retain data for a limited grace period to allow for restoration. After this period, you may request permanent deletion of all operational records from our primary database.

6. Cookie Policy

We use essential session cookies to maintain your login state and provide a secure environment. We do not use third-party tracking cookies for advertising purposes within the management application.