01Who we are
Cornerstone Fitness Solutions LLC is an Ohio limited liability company doing business as Cornerstone Media Solutions ("Cornerstone," "we," "us," or "our"). We build and operate growth systems for gyms and fitness studios — paid advertising, the Speed2Lead lead-response CRM, online booking pages, and a client portal.
Our registered mailing address is 919 North Court St., Medina, OH 44256. You can reach us about anything in this policy at admin@cornerstonemediasolutions.org.
This policy applies to cornerstonemediasolutions.org and every page on it, including /speed2lead, /book and /portal, and to the messages we send through those systems.
02Two roles we play
How we handle personal information depends on whose information it is. The distinction matters, so we spell it out.
When we decide — our own data
For visitors to our website, people who fill in our contact form, and the gym owners and staff who hold Speed2Lead accounts, Cornerstone decides what is collected and why. Under laws that use the term, we are the controller (or "business") for this information, and this policy governs it.
When our client decides — their data
Speed2Lead is a platform our clients use to run their own businesses. When a gym uploads its member list, when a lead fills in that gym’s booking page, or when that gym texts one of its own prospects, the gym decides what happens with that information. For that data we act as a service provider (or "processor") and handle it only on that client’s instructions and under our agreement with them.
If you are a lead, member or customer of a gym that uses Speed2Lead and you want to see, correct or delete your information, contact the gym directly — they control that record. If you contact us instead, we will pass your request to them and support them in answering it, but we cannot act on their data on our own.
03Information we collect
Information you give us directly
| Where | What we collect |
|---|---|
| Website contact form | Name, email address, gym or studio name, the topic you select, and the message you write. |
Booking pages (/book) | Name, phone number, email address, the service requested, and the appointment time you choose. |
| Speed2Lead accounts and the client portal | Account holder name, business email address, business name, login credentials, and account settings. |
| Messages you send us | The content of emails and text messages you exchange with us or with a gym through our systems, including attachments. |
| Client onboarding | Business details, sender identity settings, domain records, phone numbers, and billing contact information. |
Information our clients give us about other people
Gyms using Speed2Lead put lead and member records into the platform — typically name, phone number, email address, lead source, appointment history, pipeline stage, tags, notes, and appointment outcomes including amounts paid or agreement values. This information belongs to the gym; see section 2.
Information collected automatically
- Server and application logs — IP address, browser and device type, pages requested, timestamps, and error diagnostics, kept by our hosting and database providers.
- Delivery metadata — whether an email or text was accepted, delivered, bounced or failed, and the provider’s error code when it fails.
- Session cookies — a login session token, so you stay signed in to Speed2Lead or the portal.
We do not run advertising pixels, third-party analytics or behavioural tracking on this website.
Information we do not want
Please do not send us — and clients should not store in Speed2Lead — government identification numbers, payment card numbers, or health, medical or fitness-assessment records about individuals. Our systems are not built for that information and we ask that it be kept out of them.
04How we use information
- To answer you. Responding to contact form submissions, questions and support requests.
- To provide the services. Creating and running client accounts, routing leads, scheduling and confirming appointments, delivering messages, and producing the reporting our clients rely on.
- To operate and secure our systems. Diagnosing faults, preventing abuse and fraud, enforcing rate limits, and keeping accounts separated from one another.
- To improve what we build. Understanding, in aggregate, which features are used and where they fail.
- To bill and administer. Invoicing, keeping records, and managing our relationship with clients.
- To meet legal obligations. Tax and accounting records, responding to lawful requests, and maintaining evidence of consent where messaging rules require it.
We do not sell personal information, and we do not share it for cross-context behavioural advertising.
05Text messaging & consent
Cornerstone and its clients use text messaging to respond to enquiries, confirm and remind about appointments, and follow up with people who have asked to hear from a gym.
Mobile information is never shared for marketing. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are excluded from every category of information sharing described in this policy, and will not be shared with any third party.
Consent
We only text people who have given prior express consent — by submitting a form that says so, requesting a booking, replying to a message, or otherwise agreeing to be contacted by the gym. Consent is never a condition of purchasing anything. Where the messages are sent for a gym, that gym is responsible for obtaining and recording that consent.
What to expect
- Message frequency varies and depends on your conversation with the business.
- Message and data rates may apply. Your mobile carrier’s charges are between you and your carrier.
- Carriers are not liable for delayed or undelivered messages.
Stopping messages
Reply STOP to any message to opt out. Opting out is processed automatically: the record is tagged "do not contact" and permanently excluded from every campaign, enforced on our servers so it cannot be overridden from the application. Reply HELP for assistance, or email admin@cornerstonemediasolutions.org.
Outbound campaign messages are blocked during quiet hours.
06Email messaging
We send transactional email — replies, booking confirmations, password resets and account notices — and, where a gym has a lawful basis to do so, follow-up email to its own leads and members. Every marketing email includes an unsubscribe link, and unsubscribing is honoured for the sending business.
Each client sends from its own authenticated domain. Replies are routed back into that client’s account through a forwarding address on reply.cornerstonemediasolutions.org; the content of a reply is stored in that client’s account only.
07Automated and AI-assisted replies
Speed2Lead can reply to inbound messages automatically. When this is enabled, the message you send — along with recent conversation history and the gym’s availability — is processed by a third-party large language model provider (Anthropic) to generate a suggested reply, book a slot, or escalate the conversation to a human.
- You can ask to speak to a person at any time, and the system will hand the conversation to the gym’s staff.
- We do not use the content of client conversations to train AI models, and our provider is contractually bound not to train on data submitted through its business API.
- Automated replies are a convenience, not a decision-making system: nothing about your eligibility, pricing or treatment is decided by automated means alone.
10How long we keep information
- Contact form enquiries — kept while we are in contact and for up to two years afterwards.
- Client account and business records — kept for the life of the account and for as long as tax and accounting law requires afterwards, generally seven years.
- Lead, member and conversation records inside Speed2Lead — kept as long as the client’s account is active, and deleted or returned on that client’s instruction. Suspending an account retains the data; nothing is deleted automatically.
- Opt-out records — kept indefinitely. We must keep them to honour the opt-out.
- Server and delivery logs — kept for the period set by each provider, typically 30 to 90 days.
11Security
Traffic is encrypted in transit with TLS. Access to client data is enforced at the database level so that each account can reach only its own records, and administrative access is limited to people who need it. Credentials for messaging and AI providers are held as server-side secrets and are never exposed to the browser.
No system is perfectly secure. If a breach affects your personal information we will notify you and any regulator as the law requires. If you believe an account has been compromised, email admin@cornerstonemediasolutions.org immediately.
12Your privacy rights
Depending on where you live, you may have the right to:
- know what personal information we hold about you and get a copy of it;
- correct information that is wrong;
- delete information we hold about you;
- opt out of sale, sharing, or targeted advertising — none of which we do;
- limit the use of sensitive personal information;
- appeal a decision we make about your request; and
- not be discriminated against for exercising any of these rights.
Residents of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana and other states with comprehensive privacy laws hold these rights under their own statutes. If you are in the European Economic Area or the United Kingdom, you also have the right to object to processing, to data portability, and to complain to your supervisory authority.
To make a request, email admin@cornerstonemediasolutions.org with enough detail for us to find your record. We will verify your identity before acting, respond within 45 days, and tell you if we need a further 45 days. An authorised agent may act for you with written permission.
Remember: if your information sits in a gym’s Speed2Lead account, that gym decides. Send your request to them and we will help them meet it.
13Children and minors
Our website and platform are meant for businesses and are not directed to children. We do not knowingly collect personal information from anyone under 13, and we do not knowingly send marketing text messages to anyone under 18.
Gyms often run youth programmes. Clients must not enter information about a child under 13 into Speed2Lead, and must obtain a parent or guardian’s consent before entering any minor’s contact details or messaging them. If we learn that we hold a child’s information without proper consent, we will delete it. Contact us at admin@cornerstonemediasolutions.org if you believe this has happened.
14Where information is processed
We operate in the United States and our providers store and process information there. If you are outside the United States, using our services means your information is transferred to and processed in the United States, where privacy laws differ from those in your country.
15Third-party sites
Our pages and messages may link to sites we do not control — a client’s website, an advertising platform, a booking confirmation. This policy does not cover them, and we are not responsible for their practices. Read their policies before giving them information.
16Changes to this policy
We may update this policy as our services or the law change. The effective date at the top always reflects the current version. If a change materially affects how we handle your information, we will give notice by email or a notice on this site before it takes effect. Continuing to use our services after a change means you accept the updated policy.
17How to contact us
Cornerstone Fitness Solutions LLC d/b/a Cornerstone Media Solutions
919 North Court St.
Medina, OH 44256
We answer privacy questions and requests within 45 days.