Privacy Policy

Introduction

Par The Course ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at parthecourse.com (the "Service").

Please read this privacy policy carefully. By using the Service, you consent to the practices described in this policy. If you do not agree with the terms of this privacy policy, please do not access the Service.

Information We Collect

Personal Information You Provide

We collect information you voluntarily provide when using our Service, including:

• Account Information: Email address, name, and password when you create an account
• Golf Profile Data: Club distances, playing preferences, and handicap information you provide to generate course strategies
• Contact Information: Name, email address, and message content when you contact us through our contact form
• Communication Preferences: Phone number (optional) if you opt-in to receive SMS notifications about your strategy generation

Information Collected Automatically

When you access the Service, we may automatically collect:

• Device Information: Browser type, operating system, and device identifiers
• Usage Data: Pages visited, features used, and time spent on the Service
• Log Data: IP address, access times, and referring URLs

How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Generate personalized course strategy guides based on your club distances and preferences
• Send you notifications about the status of your strategy generation (if you opt-in)
• Respond to your inquiries and provide customer support
• Improve and optimize our Service
• Protect against fraud and unauthorized access
• Comply with legal obligations

Third-Party Service Providers

We use trusted third-party services to operate our Service. These providers have access to your personal information only to perform specific tasks on our behalf and are obligated to protect your information:

Resend (Email Service)

We use Resend to send transactional emails such as account verification, password resets, and strategy completion notifications. Resend is GDPR compliant and certified under the EU-US Data Privacy Framework. For more information, see Resend's Privacy Policy.

Twilio (SMS Service)

If you opt-in to SMS notifications, we use Twilio to send you text messages about your strategy generation status. Twilio processes your phone number and message content. Twilio maintains Binding Corporate Rules for global data protection. For more information, see Twilio's Privacy Notice.

SMS Data Protection: Your mobile phone number and SMS opt-in consent data will not be shared with or sold to third parties or affiliates for marketing or promotional purposes. We only use your phone number to send you the specific SMS notification you requested.

Supabase (Database & Authentication)

We use Supabase for secure data storage and user authentication. Your account information and generated strategies are stored securely in Supabase's infrastructure.

Cookies and Tracking Technologies

We use essential cookies that are strictly necessary for the operation of our Service, including:

• Authentication Cookies: To keep you logged in and secure your session
• Preference Cookies: To remember your settings and preferences

We do not use advertising or marketing cookies. We do not use third-party tracking for advertising purposes.

Do Not Track & Global Privacy Control

Do Not Track (DNT): We respect Do Not Track browser signals. However, since we do not engage in cross-site tracking or targeted advertising, your browsing experience will be the same regardless of your DNT settings.

Global Privacy Control (GPC): We honor Global Privacy Control signals as required by applicable law. When we detect a GPC signal from your browser, we treat it as a valid opt-out request for the sale or sharing of personal information.

Data Sharing and Sales

We may share your information only in the following limited circumstances:

• Service Providers: With third-party vendors who assist us in operating our Service (as described above)
• Legal Requirements: When required by law, court order, or governmental authority
• Safety: To protect the rights, property, or safety of Par The Course, our users, or others
• Business Transfers: In connection with a merger, acquisition, or sale of assets (you will be notified of any such change)

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. Generated course strategies are retained for a limited time (typically 30 days) and then automatically deleted.

You may request deletion of your account and associated data at any time by contacting us at info@parthecourse.com.

Your Privacy Rights

California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know: Request disclosure of the categories and specific pieces of personal information we collect about you
• Delete: Request deletion of your personal information, subject to certain exceptions
• Correct: Request correction of inaccurate personal information
• Opt-Out: Opt-out of the sale or sharing of your personal information (we do not sell personal information)
• Non-Discrimination: Not be discriminated against for exercising your privacy rights

To exercise these rights, please contact us at info@parthecourse.com. We will respond to verifiable requests within 45 days.

European Residents (GDPR)

If you are located in the European Economic Area, you have additional rights including:

• Access: Request access to your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Request restriction of processing
• Portability: Request transfer of your data to another service
• Object: Object to processing based on legitimate interests

Other U.S. State Privacy Laws

Residents of Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws may have similar rights. Please contact us to exercise your rights under applicable state law.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of sensitive data at rest
• Secure authentication practices
• Regular security assessments
• Access controls and audit logging

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us: