Privacy Policy

This Privacy Policy explains how Golf Round Finder (“we”, “us”, “our”), operated by Robert Byrne, collects, uses, discloses, and protects personal information when you use our marketing website (www.golfroundfinder.com), our member application (app.golfroundfinder.com), and related services (together, the “Services”).

We designed this policy for British Columbia / Canada first, informed by Canadian privacy principles (including PIPEDA and applicable BC private-sector expectations). We may expand to other regions later; see US expansion.

Contact for privacy requests: hello@golfroundfinder.com

1. Who is responsible

The organization responsible for personal information under this policy is:

• Golf Round Finder (product / brand)
• Operated by Robert Byrne
• Contact: hello@golfroundfinder.com

If we appoint a different privacy contact or entity for operations, we will update this page and the “Last updated” date.

2. Information we collect

Depending on how you interact with us, we may collect:

2.1 Information you provide

• Identity and contact: name, email address, phone number (including mobile for SMS)
• Access / waitlist intake: responses on request-access or early-access forms (interest, region, notes you choose to share)
• Account profile (member app): account identifiers, preferences such as courses, search criteria, notification preferences
• Communications: messages you send to us (e.g. contact or support email)
• Billing details (when paid plans are enabled): billing name/email and payment method metadata processed by our payment provider (we do not intend to store full card numbers on our servers)

2.2 Information collected automatically

• Usage and device data: pages viewed, approximate location derived from IP, browser/app type, referrer, timestamps, and similar technical logs
• Cookies and similar technologies: essential cookies for security and session; analytics cookies or scripts if enabled (see Cookies and analytics below)

2.3 Information from service providers

Our processors may generate or process identifiers and delivery metadata (e.g. Auth0 authentication events, Twilio SMS delivery status, Resend email delivery events, hosting logs).

We do not sell your personal information, and we do not rent or trade marketing lists.

3. How we use information

We use personal information to:

• Provide, operate, and improve the Services (including tee-time matching and alerts)
• Evaluate and respond to access / early-access requests
• Send transactional messages you request or that are necessary for the Service (e.g. account, security, alert delivery related to your searches)
• Send marketing email or SMS only where permitted by law and, where required, with your consent (CASL-aware for Canada; TCPA-ready language for possible future US SMS)
• Process payments and manage subscriptions when charging is enabled (Stripe or equivalent)—not before founder publish approval and related billing go-live gates
• Monitor reliability, prevent abuse/fraud, and secure the Services
• Comply with legal obligations and enforce our Terms

4. Service providers (processors)

We use trusted third parties to help run the Services. They process personal information on our behalf under their terms and our configuration. Current and planned categories include:

• Authentication — Auth0: account identifiers, login events
• Database / app hosting — PostgreSQL, Fly.io (API / backend as configured): account, preferences, operational data
• Marketing / web hosting — Vercel: site hosting, logs, edge analytics if enabled
• Email delivery — Resend: email address, message content/metadata
• SMS delivery — Twilio: phone number, SMS content/metadata, delivery status
• Payments (future) — Stripe: billing identity, payment method tokens, subscription status
• Analytics — Vercel Analytics (and/or other tools if we enable them): pseudonymous usage metrics

We may change providers; material changes will be reflected in an updated policy.

5. SMS and email

• Alerts: If you enable SMS or email alerts in the product, we use your number/email to send notifications about matching tee times and related service messages.
• Marketing: Marketing messages are sent only in accordance with applicable law and our consent records. You can opt out of marketing SMS (e.g. reply STOP where supported) and marketing email (unsubscribe link or by contacting us). Transactional/service messages may continue as needed to operate your account or fulfill a request.
• Message and data rates may apply for SMS (your carrier).

6. Retention

We keep personal information only as long as reasonably needed for the purposes above, including:

• Marketing leads / intake: until we decide not to onboard you and delete or anonymize per our retention practice, or you request deletion sooner (subject to legal holds)
• Member accounts: for the life of the account and a reasonable wind-down period after closure
• Logs and security records: for a limited operational period unless needed longer for security or legal reasons
• Billing records (when applicable): as required for tax, accounting, and dispute resolution

When retention ends, we delete or irreversibly anonymize information where practicable.

7. Access, correction, and deletion

Subject to applicable law, you may request to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete information (subject to exceptions, e.g. legal retention, security, or completing a transaction)

How to request: email hello@golfroundfinder.com with “Privacy request” in the subject and enough detail for us to verify your identity and locate your data. We will respond within a reasonable time consistent with Canadian privacy expectations.

You may also update certain account preferences directly in the member app when logged in.

8. Cookies and analytics

• We use cookies or local storage as needed for the site and app to function (e.g. session/security).
• We currently use Vercel Analytics on the marketing site for aggregate traffic insights. It is designed to be privacy-friendly; it is not a full advertising pixel network.
• We do not currently operate a third-party advertising cookie stack on the marketing site. If we add analytics or marketing pixels later, we will update this policy and, where required, consent UI.

9. Cross-border transfers

We are based in Canada (British Columbia focus). Some processors (including Auth0, Twilio, Resend, Vercel, Stripe, and similar vendors) may process or store data in the United States or other countries. Those jurisdictions may have different privacy laws than Canada. We use reputable providers and contractual/organizational safeguards appropriate to a small Canadian operator. By using the Services, you understand that your information may be processed outside Canada.

10. Security

We use reasonable administrative, technical, and organizational measures appropriate to the sensitivity of the information (access controls, encrypted transport where standard, least-privilege practices). No method of transmission or storage is perfectly secure; please use a strong unique password for your account and contact us promptly if you suspect unauthorized access.

11. Children

The Services are intended for adults who can form a binding contract (golf booking / membership context). We do not knowingly collect personal information from children under 13 (or the higher age required in your jurisdiction). If you believe we have collected such information, contact us and we will take appropriate steps to delete it.

12. US expansion note

We are not presenting this policy as a complete US-state privacy notice (e.g. full CCPA/CPRA inventory) for nationwide US operations. If we expand marketing or paid service to US residents in a material way, we will update this policy (and consent flows) accordingly. SMS consent language is written to be TCPA-ready for a later US launch without claiming current US-wide compliance programs.

13. Changes

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the Last updated date. For material changes, we may also provide additional notice (e.g. email or in-app) when appropriate.

14. Contact

Privacy / data requests: hello@golfroundfinder.com
General contact: hello@golfroundfinder.com
Website: www.golfroundfinder.com

Related: Terms of Service (draft sibling).

This draft is pending founder publish approval (Linear GLF-48). It has not been reviewed by external legal counsel.