Privacy Policy

1. Information We Collect

When you create an account, we collect your email address and, optionally, your phone number for notification purposes. We also store your alert preferences (courses, dates, time windows, group sizes) to provide our tee time monitoring service.

When you subscribe, we collect payment metadata necessary to manage your subscription: a Stripe customer ID, subscription ID, plan, status, and non-sensitive card data such as last 4 digits and card brand. Full card numbers and CVV codes are collected by Stripe directly — we never see or store them.

We do not collect browsing history, location data, or any information beyond what is necessary to operate the service.

2. How We Use Your Information

• To send you tee time alert notifications via email or SMS/iMessage
• To manage your account and subscription
• To improve and maintain the service
• To communicate service updates or changes

3. Data Storage and Security

Your data is stored securely using Supabase (PostgreSQL) with row-level security policies. Authentication is handled via Supabase Auth. We use industry-standard encryption for data in transit (TLS) and at rest. We do not sell, trade, or rent your personal information to third parties.

4. Third-Party Services

We use the following third-party services:

• Supabase: Authentication and database
• Stripe: Payment processing. When you subscribe, your payment details (card number, expiry, CVV) are sent directly to Stripe and stored on Stripe's PCI-compliant infrastructure. We never see or store your full card number. We receive a Stripe customer ID, subscription ID, and non-sensitive metadata (e.g., last 4 digits, card brand, billing country).
• PostHog: Product analytics (pageviews, feature usage)
• Resend: Transactional email delivery and inbound support email
• Photon: iMessage notification delivery. If you enable iMessage alerts, your phone number and the content of your alert messages are shared with Photon to deliver them.
• Sentry: Error monitoring. When an error occurs, technical details about the request (which may include your IP address and browser information) are sent to Sentry to help us fix it.
• Hetzner: Application hosting and background polling servers

Each of these services has their own privacy policies governing how they handle data.

5. Cookies

We use essential cookies for authentication and session management. We also use PostHog for product analytics, which may store data in your browser to understand usage patterns. We do not sell this data or use it for advertising.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and all associated data
• Opt out of notifications at any time by disabling alerts

7. Data Retention

We retain your account data for as long as your account is active. If you delete your account, all personal data and alert configurations are permanently removed within 30 days.

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify users of any material changes via email or an in-app notice.

9. Contact

If you have questions about this privacy policy, please contact us at support@teetimehawk.com.