1. Introduction

GolfZeal (“we,” “our,” or “us”) operates a tournament management platform for golf organizations, directors, and players. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our application.

2. Information We Collect

We collect the following categories of personal information:

• Account information: Full name, email address, and password (hashed) when you create an account.
• Player profile: Name, birth month and year, gender, handicap index, and optional profile photo.
• Contact details: Mailing address, phone number(s), and email address as provided by you or your organization director.
• Game data: Golf scores, course information, handicap differentials, and tournament results.
• Session data: IP address, browser type, and session tokens for authentication purposes.

3. How We Use Your Information

We use your personal information to:

• Provide and maintain the GolfZeal platform.
• Calculate and track handicap indexes and scoring history.
• Manage tournament registrations, pairings, and results.
• Enable organization directors to manage their members and events.
• Send account-related communications (invitations, verifications).
• Improve and develop new features for the platform.

4. Data Storage and Security

Your data is stored securely using industry-standard practices:

• Database records are stored in PostgreSQL hosted by Supabase with encryption at rest.
• Profile photos and uploaded files are stored in Cloudflare R2 object storage.
• The application is hosted on Vercel with HTTPS encryption for all data in transit.
• Passwords are securely hashed and never stored in plain text.
• We use role-based access controls to limit who can view and modify player data.

5. Data Sharing and Third Parties

We do not sell your personal information. Your data may be shared with the following third-party service providers solely to operate the platform:

• Supabase: Database hosting and management.
• Cloudflare: File storage (R2) and content delivery.
• Vercel: Application hosting and deployment.

Organization directors can view and manage player data for members of their organization. Administrators have access to all user and player data for platform management purposes.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. When records are deleted, they are soft-deleted (marked as inactive) and may be retained for a reasonable period for backup and legal compliance purposes before permanent removal.

7. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and personal data.
• Object to or restrict the processing of your data.
• Request a copy of your data in a portable format.

To exercise any of these rights, please contact us at the address below.

8. Cookies and Session Data

GolfZeal uses essential cookies for authentication and session management. We do not use third-party tracking cookies or analytics services that track individual users across websites.

9. Children's Privacy

GolfZeal is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. Player profiles for minors should be created and managed by their parent, guardian, or organization director.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes by posting a notice in the application. Continued use of GolfZeal after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at: support@golfzeal.com