Master Regulatory Dossier · India Jurisdiction

GymBeam Legal & Compliance Portal

Welcome to the official legal and regulatory repository for GymBeam, operated under the AETHRIVE technology platform. This dossier provides complete transparency for customers, gym partners, enterprise auditors, and regulatory bodies under Indian and international platform standards.

Statutory & Legislative Framework Enforced
DPDPA 2023Digital Personal Data Protection Act, 2023 (Act No. 22 of 2023)
IT Act 2000 & IT Rules 2021Information Technology Act, 2000 & Intermediary Guidelines Rules, 2021
Consumer Protection 2020Consumer Protection (E-Commerce) Rules, 2020 & CPA 2019
RBI Data LocalizationStorage of Payment System Data (RBI/2017-18/153)
CERT-In Directions 2022Cybersecurity Incident Reporting under Section 70B(6) of IT Act
App Store & Play StoreGoogle Play Mandatory Account Deletion & Apple Guideline 5.1.1(v)

Legal Documents & Policies

6 Active Instruments · Audited November 2026
DOCUMENT 1
Audience: Customers

Master Terms of Service & User Agreement

Customer-facing contract governing GymBeam platform use, workout slot reservations, flexible membership passes, health liability waivers, and intermediary safe harbor protections.

Read Official Policy
DOCUMENT 2
Audience: Customers

Master Privacy Policy

Statutory data protection notice explaining personal data processing, device permissions, DPDPA 2023 consent architecture, and statutory grievance mechanisms.

Read Official Policy
DOCUMENT 3
Audience: Gym Operators

Gym Operator Partner Agreement & Commercial Terms

Commercial contract binding gymnasium owners and managers, outlining KYC requirements, facility safety warranties, midnight pricing mechanics, platform commission tiers, and RazorpayX payouts.

Read Official Policy
DOCUMENT 4
Audience: Technical & Security

Platform Security Statement & Technical Safeguards

Verifiable technical security disclosures detailing TLS 1.3 transport encryption, Bcrypt credential hashing, PCI-DSS Level 1 payment isolation, RBAC JWT integrity, and CERT-In 6-hour incident reporting.

Read Official Policy
DOCUMENT 5
Audience: Technical & Security

Cookie & Client-Side Device Storage Notice

Transparency notice on client-side storage, distinguishing between browser cookies, AsyncStorage, JWT tokens, and certifying zero third-party advertising retargeters.

Read Official Policy
DOCUMENT 6
Audience: Statutory Compliance

Statutory Account Deletion & Data Erasure Policy

Mandatory deletion instructions and policy satisfying DPDPA 2023 right to erasure, Google Play Store account deletion mandate, and Apple App Store Review Guideline 5.1.1(v).

Read Official Policy
Grievance Redressal Desk

Need statutory assistance or wish to lodge a formal complaint?

In accordance with Rule 3(2) of the IT Rules 2021 and Section 13 of the DPDPA 2023, our designated officer acknowledges all complaints within 24 hours and resolves issues within 15 calendar days.

Email Grievance Officer