Privacy Policy
How GetFairways collects, uses, and protects your information.
Last updated: September 23, 2026
1. Introduction
GetFairways ("we," "our," or "us") operates the website at getfairways.com and the GetFairways golf tournament management platform. This Privacy Policy describes how we collect, use, disclose, and protect personal information when you use our services.
GetFairways serves two kinds of people: organizers, who create accounts and run events, and players, whose information organizers enter or who register for events. This policy covers both.
2. Information we collect
Account information (organizers)
When you create an account, we collect your email address and password (stored only as a secure hash). If you enable two-factor authentication, we store the enrollment record but never your authenticator secret in readable form. If you subscribe to a paid plan, Stripe processes your payment information; GetFairways never stores card numbers, bank account details, or other financial instrument data.
Tournament and player data
- Player names, email addresses, and phone numbers (when provided)
- Handicap indexes, hole-by-hole scores, and results
- Tournament settings, course information, teams, flights, and event details
- Entry-fee payment status (processed via Stripe; we store amount, date, and status only)
- Sponsor names, logos, and websites you upload
Support assistant conversations
Messages you send to the in-app AI support assistant, and its replies. See Section 4.
Automatically collected information
- Device type, browser type, and operating system
- IP address and approximate location derived from it
- Pages visited and features used; date and time of access
- Security signals from Cloudflare Turnstile used to block bots
GPS location data
If you use the GPS Rangefinder, your device's location is used locally to calculate distances to greens. GPS coordinates are processed on your device and are not stored on our servers. Green coordinates you pin during course setup are stored as part of your course record. Course search terms are sent to our course-data provider.
3. How we use your information
- Provide, operate, and maintain the GetFairways platform
- Process tournament registrations, scoring, and leaderboard updates
- Process payments through Stripe and record your consent to subscription terms
- Send transactional email and SMS: registration confirmations, RSVP requests, results, trial and renewal reminders, security notices
- Respond to support requests, including through the AI support assistant
- Improve and develop features, using aggregated or de-identified data where possible
- Detect and prevent fraud, abuse, and security incidents
- Comply with legal obligations
4. Use of artificial intelligence
GetFairways uses AI-powered features, including our in-app support assistant. When you use the assistant, the messages you type are sent to a third-party AI model provider (Anthropic, PBC) to generate a response. We use the provider's business API, under which your messages are not used to train AI models.
Do not enter payment card numbers, passwords, or sensitive personal information into the support assistant. The assistant cannot access your billing details, cannot issue refunds or credits, and cannot change your account; it can create a support ticket for our team. Its answers may be inaccurate and do not create commitments on our behalf.
We may review support conversations to improve the service and to investigate abuse. Conversations are retained for 90 days.
5. Who we share information with
We do not sell, rent, or trade personal information, and we do not share it for cross-context behavioral advertising. We share data only with the service providers below, which process it on our instructions under their own privacy terms, and in the other limited circumstances listed.
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase, Inc. (US) | Database, authentication, file storage | Account, tournament, and player data |
| Vercel, Inc. (US) | Website and application hosting | Request logs, IP address |
| Cloudflare, Inc. (US) | DNS, bot protection, content delivery | IP address, request metadata |
| Stripe, Inc. (US) | Payment processing and subscription billing | Payment details (never stored by us), email |
| Resend, Inc. (US) | Transactional email | Email address, message content |
| Twilio, Inc. (US) | SMS delivery | Phone number, message content |
| Anthropic, PBC (US) | AI support assistant | Support chat messages |
| Golf Course API | Course and hole data lookup | Course search terms |
| Google LLC (US) | Analytics and advertising measurement on our marketing pages | Usage data, cookies (see Section 9) |
- Tournament participants: player names, handicaps, and scores are visible on tournament leaderboards, including public spectator boards the organizer chooses to share. Email addresses and phone numbers are visible only to the tournament's administrators.
- Legal requirements: we may disclose information if required by law, court order, or governmental authority, or to protect the rights, safety, or property of GetFairways, our users, or the public.
- Business transfers: if GetFairways is acquired or merged, data may transfer to the successor, who will be bound by this policy.
6. Data security
- All connections are encrypted via HTTPS/TLS
- Database access is secured with Row Level Security (RLS): your tournament data is accessible only to you and the co-administrators you designate
- Payment processing is handled entirely by Stripe; we never store card details
- Authentication is managed by Supabase Auth, with optional two-factor authentication
- Uploaded files are validated server-side before import; we do not retain raw uploaded spreadsheets
- Edge functions use rate limiting, bot verification, and CORS restrictions
No system is perfectly secure. If we learn of a breach affecting your personal information, we will notify you as required by applicable law.
7. How long we keep your data
| Data | Retention |
|---|---|
| Account and profile | Life of the account, plus 30 days after deletion |
| Tournament, league, score, and player data | Life of the account; you may delete individual tournaments at any time |
| Payment records (transaction IDs, amounts, dates) | 7 years, for tax and accounting requirements |
| Subscription consent and terms-acceptance records | 3 years, or 1 year after cancellation, whichever is longer (legal requirement) |
| Support assistant conversations | 90 days |
| Server, security, and rate-limiting logs | 30 days (rate-limit logs: 24 hours) |
| Marketing email preferences | Until you unsubscribe |
Backups are retained for up to 30 days on a rolling basis; deleted data may persist in backups during that window.
8. Deleting your data and your rights
Deletion
Organizers can delete individual tournaments from the dashboard at any time. To delete your entire account, go to Settings → Delete account (or email us). Deletion takes effect after a 30-day grace period during which you can cancel the request; after that, your account and all tournament and player data are permanently removed from our production systems, and from backups within a further 30 days. Payment and consent records are retained as required by law. Data you have already exported or shared (for example, results emailed to players) is outside our control.
Organizers are responsible for their players' data. If you are a player and want your information corrected or removed from a tournament, contact the organizer first; if you cannot reach them, email support@getfairways.com and we will assist.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to opt out of certain processing. Organizers can exercise most of these rights directly in Settings, including a full data export. For anything else, email support@getfairways.com; we will verify your identity through your account email and respond within 30 days. We will not discriminate against you for exercising these rights. California residents may designate an authorized agent to make requests on their behalf.
9. Cookies and local storage
The GetFairways application uses essential cookies and browser local storage for authentication (keeping you signed in) and your display preferences. Our marketing pages (the home page and blog) use Google Analytics and Google Ads measurement cookies to understand traffic and measure advertising; you can opt out via Google's opt-out tools or your browser settings. The application itself sets no advertising cookies.
10. Children's privacy
GetFairways is not directed at children under 13, and organizers must be 18 or older. We do not knowingly collect personal information from children under 13. Organizers who register junior players are responsible for obtaining any required parental consent. If you believe a child under 13 has provided us with personal information, contact us and we will delete it promptly.
11. Where data is processed
GetFairways is operated from Montana, USA, and our providers process data in the United States. If you access the Service from outside the US, you consent to your information being transferred to and processed in the US.
12. Changes to this policy
We may update this Privacy Policy from time to time. For material changes we will email account holders and post the updated policy here with a revised "Last updated" date. Continued use of GetFairways after the effective date constitutes acceptance.
13. Contact us
Questions about this Privacy Policy or our data practices: support@getfairways.com.