Privacy Policy — RoundHQ Golf

RoundHQ Golf is a tournament management platform. This policy explains what personal data we collect and how we use it.

1. What we collect

Account data: your name, email address, and a securely hashed password.
Organisation data: organisation name, type, country, preferred language, and timezone.
Event and player data: information you enter about events, competitors, scores, and payments.
Technical data: minimal server logs required to operate and secure the service.

2. How we use it

We use your data only to provide the service — running events, producing leaderboards and reports, and processing payments through Stripe. We do not sell personal data.

3. Data separation

Each organisation's data is isolated at the database level. Users can only see data belonging to organisations they are a member of.

4. Payments

Payments are processed by Stripe. We store only non-sensitive metadata (amount, currency, status, and Stripe references). Card details never touch our servers.

5. Retention

We retain event and account data while your organisation is active. You can request deletion of your account by contacting us.

6. Your rights

You can request access to, correction of, or deletion of your personal data. Contact us via the contact page.

7. Changes

We may update this policy. The "last updated" date above will change when we do.

8. Error monitoring

When a page fails, our site sends a minimal error report so we can find and fix the fault. Monitoring is switched off unless a monitoring destination is configured for the deployment; when it is switched off, no report is sent at all.

A report contains only a fixed error code from a short published list, a route template such as /e/:slug (never the address you actually visited, and never its query string), the environment name, the build identifier and an opaque reference generated by our server. It contains no name, email address, account, club or player identifier, no cookie, no request content, no browser headers and no session recording.

Reports are relayed by our own server, so your browser never contacts the monitoring provider and the provider never sees your connection. Any network connection involves the transient receipt of an IP address by the receiving server; our relay does not place your IP address in the report, and each report is marked so that the provider does not derive, attach or store an IP address, approximate location or country from it.

Error reports are held by the monitoring provider for its configured retention period of 90 days and are then deleted. We may delete an individual report sooner.

We do not use session replay, performance tracing, profiling, logging or usage metrics, we attach no files, and no error message text or stack trace produced by your browser is transmitted.