Privacy Policy
Last updated: November 8, 2026
Vortisk Gym Manager (“Vortisk”, “we”, “us”) is a gym-management application that runs inside your CRM platform. This policy explains what we collect, why, and the choices you have. By installing or using the app you agree to the practices described here.
1. Information We Collect
- Account & gym data — your gym name, owner name, email, and CRM location ID provided when you install the app.
- Member data — member names, emails, phone numbers, membership status, plans, check-ins and class bookings synced from your CRM contacts.
- Billing events — invoice and payment notifications from CRM (product, price and invoice identifiers) used to assign or revoke memberships automatically. We do not collect or store card numbers or payment credentials.
- Usage & technical data — IP address, log events and error reports used to keep the service running and secure.
2. How We Use It
We use your data only to provide the service: syncing members from CRM, recording check-ins, scheduling classes, sending retention and billing notifications, and providing support. We do not sell your data or use it for advertising.
3. Data Storage & Security
Data is stored on secured servers with encrypted connections (HTTPS/TLS). Access is restricted to authorised personnel. OAuth tokens for your CRM account are stored encrypted and refreshed automatically; we never see your CRM password.
4. Integration Data (your CRM)
The app connects to your CRM via OAuth to read and update contacts, apply tags, read products, and receive contact and invoice webhooks. We only access the data needed to operate gym features for your location. You can revoke this access at any time by uninstalling the app from your CRM Marketplace account.
5. Data Sharing
We share data only with infrastructure providers that help us run the service (e.g. hosting and email delivery), and where required by law. These providers are bound to protect your data and may not use it for any other purpose.
6. Cookies
We use essential cookies for authentication and session management. The app runs inside the CRM iframe and uses cookies solely to keep you signed in — not for tracking or advertising.
7. Your Rights
You may request access to, correction of, or deletion of your data at any time. Because member records originate in your CRM account, you remain the data controller for your members; Vortisk acts as a processor on your behalf.
8. Data Retention
We retain your data for as long as your gym uses the app. After you uninstall, gym and member data is deleted or anonymised within 90 days, except where we must retain limited records to meet legal or accounting obligations.
9. Policy Changes
We may update this policy from time to time. Material changes will be announced in-app or by email. Continued use after an update constitutes acceptance of the revised policy.
10. Contact Us
Questions about this policy or your data? Reach us through the support page and we’ll respond within 24 hours.