Your gym’s data, and your members’, handled with care.

UsefulDesk is a WhatsApp-based customer-relationship tool for gyms and fitness businesses, operated by UsefulMade (India).

This policy explains what data UsefulDesk processes, why, who we share it with, and how you can delete it. For any privacy question, contact contact@usefulmade.com.

• — Your account data. Name, email, and login credentials for the people on your gym's team who use UsefulDesk.
• — Your contacts' data. What you or your customers provide: name, phone number, email, and any custom fields you record about members and leads.
• — WhatsApp message content. The messages exchanged between your business and your contacts through the platform.
• — WhatsApp Business account data. Obtained via the Meta / WhatsApp Business API: WhatsApp Business Account (WABA) and phone-number identifiers, and access tokens (stored encrypted).
• — Facebook Login data. We use Facebook Login for Business only to connect the WhatsApp Business Account or Facebook Page you administer. We do not store your Facebook profile — name, email, friends, or profile details.
• — Payment data. If your gym enables member payments, member contact and payment details are shared with its payment provider. If your organization buys a UsefulDesk subscription, Razorpay processes the checkout; we retain order, payment, and refund references needed for access and support. We do not store card numbers.

We process this data solely to operate the service for your business: sending and receiving WhatsApp messages, renewal and payment reminders, managing members and leads, and processing payments you initiate.

We do not sell your data or your customers’ data, and we do not use message content to train our own AI models.

We process this data to perform our contract with you (providing the service) and on the basis of your and your customers’ consent for WhatsApp communication, which is obtained through your business’s own opt-in process. You are responsible for having a lawful basis to contact the members and leads you upload.

We share data with the following providers strictly to operate the service:

If you configure outbound webhooks, message and contact data is also sent to the URL you specify; you are responsible for that destination.

WhatsApp access tokens and payment-gateway secrets are encrypted at rest (AES-256-GCM). Each business’s data is isolated at the database level (row-level security). Inbound WhatsApp webhooks are cryptographically verified before processing.

We retain data for as long as your account is active. You can:

• — Delete individual records (contacts, notes, media) at any time.
• — Permanently delete your entire account and all associated data from Settings → Members → Delete account — this erases every contact, conversation, message, and connected credential, and cannot be undone.
• — Request deletion of data associated with a Facebook Login at desk.usefulmade.com/data-deletion, or by emailing contact@usefulmade.com.

You may request access to, correction of, or deletion of your personal data by emailing contact@usefulmade.com. We respond within a reasonable period and, where required, in line with applicable Indian data-protection law.

UsefulDesk is a business tool intended for gym operators. It is not directed at children under 18, and we do not knowingly collect data directly from children.

We disclose user data to public authorities only when compelled by valid legal process under Indian law, and only the minimum the order requires. We challenge overbroad or improper requests and, where lawful, notify the affected user.

We may update this policy; material changes will be reflected by the effective date at the top.