Privacy policy.

This Privacy Policy explains how DivotData collects, uses, stores, shares, retains, and deletes information when you use the website, app, uploads, Divot Cards, practice features, beta feedback, coach workflows, facility workflows, and support channels.

Controller and contact: DivotData is the service name used for the current beta operator of getdivotdata.com. Privacy, deletion, access, correction, portability, accessibility, and legal-entity update requests can be sent to support@getdivotdata.com. This policy will be updated if the service is assigned to an LLC or another legal entity.

• Account and authentication data: name, email address, authentication identifiers, sign-in provider, settings, profile preferences, and account security events. Purpose: create accounts, secure access, sync the notebook, provide support, and manage deletion or rights requests.
• Simulator and practice data: uploaded files, pasted table text, file names, source labels, player labels, club labels, shot rows, parsed summaries, data-quality warnings, notes, retest history, generated Divot Cards, confidence scores, and practice recommendations. Purpose: parse shot data, generate one focused card, maintain history, compare retests, troubleshoot compatibility, and improve parser quality.
• Coach, facility, guest, and student data: rosters, bay labels, student or guest names, workflow notes, shared-card context, and facility or coach contact details that you choose to provide. Purpose: support coach and facility beta workflows, guest cards, shared cards, manual review, and product support.
• Support, feedback, and communications: messages, screenshots, simulator examples, bug reports, product requests, and contact preferences. Purpose: respond to requests, debug uploads, improve the product, document consent, and maintain business records.
• Technical, device, and usage data: browser and device details, approximate location from IP address, logs, local analytics events, cookies or similar storage, performance data, security events, and usage activity. Purpose: operate, secure, debug, analyze, prevent abuse, and improve the service.

Do not upload payment card numbers, government identifiers, medical or health information, biometric identifiers, precise location, or information you are not authorized to share. DivotData is built for simulator golf data, not sensitive health, financial, identity, employment, insurance, gambling, or eligibility decisions.

Firebase or another authentication provider may process login credentials needed to secure your account. DivotData does not need sensitive personal information to generate Divot Cards.

• Provide the service: accounts, upload processing, original-file backup, parsed shot history, Divot Cards, confidence scoring, likely-focus suggestions, practice blocks, retest comparisons, and saved notebook features.
• Support and troubleshoot: manual beta review, parser debugging, simulator compatibility validation, customer support, feedback review, and bug investigation.
• Improve and secure the product: analytics, data-quality checks, abuse prevention, fraud prevention, security monitoring, reliability, product research, and de-identified or aggregated benchmarking.
• Operate the business: beta communications, pricing-plan interest, coach or facility pilot follow-up, legal compliance, dispute handling, enforcement of terms, and business transfers.

You retain ownership of your uploaded simulator data. You give DivotData permission to host, copy, parse, process, store, back up, display, transmit, and use that data as needed to operate, support, secure, troubleshoot, and improve the service. Aggregated or de-identified information may be used to improve compatibility, parser quality, benchmarks, and product performance, and will not be used to identify you unless re-identification is allowed by law and needed for security, legal, or support reasons.

DivotData may share information with service providers that help operate the product, such as hosting, database, authentication, storage, analytics, email, support, payment, security, and deployment providers. DivotData may also disclose information if required by law, to protect rights and safety, to investigate abuse, in a business transfer, or with your direction or consent.

DivotData does not sell personal information and does not share personal information for cross-context behavioral advertising. If that changes, DivotData will update this policy and provide any required opt-out controls before beginning that activity.

If a coach, facility, staff member, or account holder uploads or shares guest, student, or player information, that person or organization is responsible for having permission to do so and for giving any privacy notices required by law. Guest cards or shared links may be viewable by people who receive or access the link.

• Account, profile, settings, and notebook records: kept while your account is active, then targeted for deletion after account-level deletion is verified unless retention is required for security, legal, tax, dispute, or backup reasons.
• Uploaded files, pasted rows, parsed simulator summaries, Divot Cards, notes, and retest history: kept until you delete the upload or history in the app, request account-level deletion, or DivotData removes old beta records under a retention review.
• Local analytics events: stored in your browser only, capped at 200 recent events, and removed when you clear site storage or browser data.
• Support, feedback, and manual review records: generally kept for up to 3 years after the last interaction unless a longer period is needed for legal, security, or dispute reasons.
• Security, diagnostic, and operational logs: generally kept for 12 to 24 months where practical, unless needed longer to investigate abuse, protect the service, or comply with legal obligations.
• Billing and tax records if paid plans become available: kept for the period required by law, generally up to 7 years after the transaction or account closure.
• Aggregated or de-identified data: may be kept indefinitely for parser quality, compatibility, product performance, and benchmarking when it no longer identifies a user.

You can delete uploads and simulator history inside the app where controls exist. You can request account-level deletion, access, correction, portability, or restriction by contacting support@getdivotdata.com. DivotData may verify your identity before acting on a request.

After a verified deletion request, active account data is targeted for deletion within 30 days where practical. Backup, security, and operational copies may take up to 90 days to age out, and legal, dispute, tax, security, or de-identified records may be retained when allowed or required by law.

This section supplements the policy for California residents. California categories collected may include identifiers, customer records, internet or network activity, commercial information, approximate geolocation from IP address, inferences from simulator data, professional or education information if a coach or facility chooses to provide it, and sensitive account-login information processed by authentication providers for account security.

California residents may have rights to know/access, delete, correct, portability, opt out of sale or sharing, limit certain sensitive personal information, and be free from discrimination for exercising privacy rights. DivotData does not sell personal information or share it for cross-context behavioral advertising. Authorized agents may submit requests if legally permitted and properly verified.

DivotData does not currently use cross-site behavioral advertising and does not sell or share personal information. Because there is no sale or cross-context behavioral advertising to opt out of, DivotData does not currently respond differently to browser Do Not Track signals. If a browser Global Privacy Control or similar signal becomes relevant to a future opt-out right, DivotData will honor it as required by applicable law.

If GDPR, UK GDPR, Swiss FADP, or similar law applies, DivotData processes personal data on these legal bases: contract when needed to provide accounts, uploads, cards, saved history, and support; legitimate interests for security, abuse prevention, product improvement, compatibility validation, and business operations; consent for optional communications or optional cookies where required; and legal obligation for records, disputes, law enforcement, and compliance.

DivotData is operated primarily from the United States. Personal data may be processed in the United States and other countries where DivotData or service providers operate. Where required, DivotData relies on provider data-processing terms, appropriate safeguards, or other lawful transfer mechanisms.

European users may request access, correction, deletion, restriction, objection, portability, and withdrawal of consent where applicable. They may also lodge a complaint with a supervisory authority. Divot Cards use automated scoring and inference to create practice suggestions, but they are informational only and are not used for legal, employment, credit, insurance, medical, eligibility, or similarly significant decisions.

DivotData uses reasonable administrative, technical, and organizational safeguards for a beta software product, but no website, app, storage system, network, or transmission method is completely secure. You are responsible for protecting your account credentials and controlling who receives shared cards or links.

DivotData is not intended for unsupervised use by children. If you use DivotData for junior golfers, students, guests, or minors, you are responsible for parent or guardian consent, supervision, safety, and compliance with applicable law.

DivotData may update this Privacy Policy as the beta product, features, service providers, legal entity, and legal requirements change. Material updates will be reflected by changing the last-updated date and, where required, by providing additional notice. Continued use of DivotData after an update means you accept the updated policy.