Privacy Policy

VERVE Pulse is a gym management software platform operated by VERVE Pulse Pty Ltd (ACN pending), a company incorporated in New South Wales, Australia.

In this policy, “VERVE Pulse,” “we,” “us,” or “our” refers to VERVE Pulse Pty Ltd. “You” or “your” refers to you as a gym operator (our customer) and, where relevant, your gym’s members.

Contact: privacy@vervepulse.io

Gym account information: When you create an account, we collect your name, email address, gym name, business address, phone number, and billing details. This is used to operate your account and send invoices.

Member data you enter: You may enter your gym members’ names, contact details, membership types, attendance history, health notes, payment methods, and other information into the platform. This data belongs to you and is processed on your behalf as a data processor.

Usage data: We collect information about how you use the platform — pages visited, features used, session duration, and error logs. This is used to improve the product and diagnose issues.

Device and technical data: We may collect your IP address, browser type, operating system, and device identifiers to provide the service and for security purposes.

Communications: If you contact us for support, we retain those communications to assist you and improve our service.

We use the information we collect to:

• Provide, operate, and improve the VERVE Pulse platform
• Process payments and send billing communications
• Send operational notifications (system updates, security alerts, invoices)
• Respond to your support requests
• Detect and prevent fraud, abuse, or security incidents
• Comply with legal obligations

We will only send you marketing emails if you opt in. You can unsubscribe at any time.

When you use VERVE Pulse to manage your gym members, you act as the data controller for your members’ personal information. We act as your data processor — we process member data only as directed by you and only for the purpose of providing the service to you.

You are responsible for:

• Obtaining appropriate consent from your members before entering their data into VERVE Pulse
• Notifying your members that their data is managed using third-party software
• Handling member data access and deletion requests under applicable law

We will assist you in responding to member data requests where technically possible.

We do not sell your data or your members’ data. We share data only with the following categories of service providers, solely to operate the platform:

• Supabase — database and authentication infrastructure (AWS ap-southeast-2)
• Vercel — application hosting and CDN
• Stripe — payment processing (PCI DSS Level 1)
• Resend / SendGrid — transactional email delivery
• Anthropic — AI features (anonymised, not linked to identifiable gym members)

We may also disclose information where required by law, court order, or to protect the rights and safety of our users.

We retain your account data for as long as your subscription is active and for 12 months after cancellation, to allow for account reactivation and to resolve any billing disputes.

If you request deletion of your account, we will permanently delete your data within 30 days, except where we are required to retain it by law (e.g., financial records under the Corporations Act 2001).

Usage and analytics data is retained in aggregated, anonymised form indefinitely for product improvement.

Under the Australian Privacy Act 1988 (and, where applicable, GDPR), you have the right to:

• Access the personal information we hold about you
• Correct inaccurate personal information
• Delete your personal information (subject to legal obligations)
• Export your data in a machine-readable format
• Object to or restrict certain processing activities
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at privacy@vervepulse.io. We will respond within 30 days.

VERVE Pulse uses essential cookies to authenticate your session and keep you logged in. We do not use tracking or advertising cookies.

You can disable cookies in your browser settings, but doing so will prevent you from logging in to the platform.

We take commercially reasonable steps to protect your information from unauthorised access, disclosure, or destruction. For full details, see our Security page.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by displaying a prominent notice in the platform at least 14 days before the change takes effect.

Your continued use of VERVE Pulse after the effective date constitutes your acceptance of the updated policy.

For any privacy-related questions or requests:

Email: privacy@vervepulse.io
Post: VERVE Pulse Pty Ltd, 4 Dalton St, Upper Coomera, QLD 4209, Australia

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.