Acceptable use policy
Last updated
This policy is part of our terms of service. It applies to the gym, its owner and every staff account using GymSetora. The gym is responsible for what its staff do in the app.
1. WhatsApp, SMS and other messages
- Message only members and leads who have given you their number and agreed to hear from your gym.
- No spam, bulk promotions to bought or scraped lists, or messages a member has asked you to stop.
- Follow the WhatsApp Business and Commerce policies and the TRAI rules on commercial communication.
- Don’t send misleading, abusive, hateful or illegal content, or ask members for passwords, OTPs or card details.
2. Member data
- Record only what your gym needs, with a lawful basis or the member’s consent as the DPDP Act 2023 requires.
- Get a parent or guardian’s verifiable consent before recording data of a member under 18.
- Don’t store full Aadhaar numbers, card numbers or bank passwords in notes or custom fields.
- Don’t sell member data or use it for anything unrelated to running your gym.
3. Accounts and access
- Give each staff member their own login; don’t share passwords. Turn on two-factor login for owner and admin accounts.
- Remove a staff member’s access as soon as they leave.
- Don’t resell, sublicense or let another business use your account without our written permission.
4. Security and the platform
- Don’t try to access another gym’s data or any account that isn’t yours.
- Don’t probe, scan, overload or disrupt the service, or bypass rate limits, device locks or other protections.
- Don’t upload malware, or scrape or copy the software.
- Found a vulnerability? Report it privately to [email protected]. Good-faith research that follows our reporting guidelines is welcome.
5. If this policy is broken
We may remove content, limit messaging, or suspend or close the account, depending on how serious the breach is. Where we can, we warn the owner first and give time to fix it. We may report illegal activity to the authorities.