Privacy Policy

Welcome to RunPools (also known as "Golf Pool Manager"). This Privacy Policy explains how 64 Industries ("we," "our," or "us") collects, uses, discloses, and protects your personal information when you use our golf tournament pool management platform.

By accessing or using RunPools, you agree to this Privacy Policy. If you do not agree with any part of this policy, please do not use our services.

Key Principles:

• We collect only the data necessary to operate the service
• We never sell your personal information to third parties
• Payment information is handled securely by Stripe (we never see your full credit card details)
• You can request deletion of your data at any time

2.1 Information You Provide Directly

• Account Information: Name, email address when you create or join a pool
• Pool Data: Pool names, participant names, golfer selections, entry fee amounts
• Payment Information: Processed and stored by Stripe (see Section 4 below)
• Communications: Messages sent to our support team, feedback, or inquiries

2.2 Information Collected Automatically

• Usage Data: Pages viewed, features used, time spent on platform, click behavior
• Device Information: IP address, browser type, operating system, device identifiers
• Cookies and Tracking: Session cookies for login persistence, analytics cookies for usage tracking (see Section 7)
• Location Data: Approximate geographic location based on IP address (for fraud prevention)

2.3 Information from Third Parties

• Stripe: Payment confirmation, transaction IDs, payout status
• PGA Tour Data Providers: Real-time golf scores (no personal data)
• Analytics Providers: Aggregated usage statistics (anonymized)

We use your personal information for the following purposes:

3.1 Service Delivery

• Create and manage golf pools
• Process entry fee payments and distribute prize winnings
• Display real-time leaderboards with live scoring
• Send email notifications (pool invites, payment confirmations, tournament reminders)
• Provide customer support and respond to inquiries

3.2 Platform Improvement

• Analyze usage patterns to improve features and user experience
• Conduct A/B testing for interface optimizations
• Debug technical issues and fix bugs
• Develop new features based on user behavior

3.3 Safety and Security

• Detect and prevent fraud, abuse, and security threats
• Verify identity for high-value transactions
• Enforce our Terms of Service
• Comply with legal obligations (tax reporting, payment regulations)

3.4 Communications (With Your Consent)

• Send transactional emails (e.g., "Your pool has been created")
• Send promotional emails about new features or tournaments (opt-out available)
• Request feedback or surveys (optional participation)

We do not store your credit card information. All payment processing is handled by Stripe, Inc., a PCI-DSS Level 1 certified payment processor.

What Stripe Collects:

• Full credit card number (encrypted)
• Expiration date and CVV
• Billing address
• Bank account information (for payouts to winners)

What We Receive from Stripe:

• Last 4 digits of card number
• Card brand (Visa, Mastercard, etc.)
• Transaction ID
• Payment status (successful, failed, pending)

Stripe's privacy practices are governed by their own Privacy Policy. By using our payment features, you also agree to Stripe's terms.

We do not sell your personal information to third parties. We share your data only in the following limited circumstances:

5.1 With Other Pool Participants

When you join a pool, your name and golfer selections are visible to other participants in that pool. This is necessary for competitive play and leaderboard functionality. Your email address and payment information are never shared with other participants.

5.2 Service Providers

• Stripe: Payment processing and payouts
• Vercel: Web hosting infrastructure
• SendGrid/Resend: Transactional email delivery
• Google Analytics: Anonymized usage analytics
• Golf Data APIs: Real-time PGA Tour scoring

All service providers are contractually required to protect your data and use it only for the purposes we specify.

5.3 Legal Requirements

We may disclose your information if required by law, such as:

• Responding to subpoenas, court orders, or legal processes
• Complying with tax reporting obligations (e.g., IRS Form 1099 for large winnings)
• Protecting the rights, property, or safety of RunPools, our users, or the public
• Enforcing our Terms of Service or investigating violations

5.4 Business Transfers

If RunPools is acquired by or merged with another company, your information may be transferred to the new owners. We will notify you via email before any such transfer and provide options to delete your data if desired.

We retain your personal information only as long as necessary to provide our services and comply with legal obligations:

• Active Pools: Data retained while pool is active and for 1 year after tournament ends (for historical leaderboards and dispute resolution)
• Financial Records: Payment and payout records retained for 7 years (tax and accounting requirements)
• Account Data: Deleted within 90 days of account deletion request (subject to legal holds)
• Anonymized Data: Usage analytics retained indefinitely in aggregated, de-identified form

You can request deletion of your data at any time by contacting support@runpools.com.

We use cookies and similar technologies to enhance your experience:

7.1 Essential Cookies (Required)

• Session management (keeps you logged in)
• Security tokens (prevents CSRF attacks)
• Load balancing (distributes traffic efficiently)

7.2 Analytics Cookies (Optional - Can Be Disabled)

• Google Analytics: Tracks page views, referral sources, device types
• Vercel Analytics: Measures page load performance

How to Control Cookies:

• Most browsers allow you to block or delete cookies through settings
• Blocking essential cookies may prevent you from using certain features
• You can opt out of Google Analytics using their opt-out browser add-on

Depending on your location, you may have the following rights:

8.1 Access

Request a copy of the personal data we hold about you. We'll provide this in a machine-readable format within 30 days.

8.2 Correction

Update inaccurate or incomplete information. You can edit your name and email directly in your pool settings.

8.3 Deletion ("Right to Be Forgotten")

Request permanent deletion of your account and associated data. Note: We may retain certain records for legal compliance (e.g., tax records).

8.4 Portability

Request your data in a structured, commonly used format (e.g., CSV, JSON) to transfer to another service.

8.5 Objection

Opt out of promotional emails (transactional emails like payment confirmations cannot be disabled).

8.6 Restriction

Request that we limit how we use your data while a complaint is being investigated.

How to Exercise Your Rights:

Email support@runpools.com with the subject "Privacy Rights Request" and include:

• Your full name and email address used on RunPools
• Specific right you wish to exercise (e.g., "Delete my account")
• Verification: We may ask for additional information to confirm your identity

We will respond within 30 days. If we deny your request, we'll explain why and how to appeal.

RunPools is operated from Canada. If you access our services from outside Canada, your information may be transferred to, stored, and processed in Canada or other countries where our service providers are located.

For EEA/UK Users: We rely on Standard Contractual Clauses (SCCs) approved by the European Commission for data transfers outside the EEA. You can request a copy of these clauses by emailing support@runpools.com.

For California Users: See Section 12 below for CCPA-specific disclosures.

We take data security seriously and implement industry-standard safeguards:

• Encryption: All data transmitted over HTTPS/TLS 1.3
• Payment Security: PCI-DSS compliance through Stripe
• Access Controls: Role-based permissions, multi-factor authentication for staff
• Infrastructure: Hosted on Vercel with automatic security patches
• Monitoring: 24/7 intrusion detection and anomaly alerts
• Data Backups: Daily encrypted backups stored in geographically separate locations

Data Breach Notification: In the unlikely event of a breach affecting your personal information, we will notify you within 72 hours via email and provide steps to protect yourself.

Your Responsibility: Keep your account credentials secure. Never share your pool management link with unauthorized individuals. Use a strong, unique password.

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

Categories of Personal Information Collected:

• Identifiers (name, email, IP address)
• Financial information (payment method, transaction history)
• Commercial information (purchase history, entry fees paid)
• Internet activity (browsing history, usage data)
• Geolocation data (approximate location from IP)

Business Purposes for Collection:

• Providing and improving our services
• Processing payments
• Fraud prevention and security
• Customer support
• Analytics and research

Your CCPA Rights:

• Right to Know: Request details about data collected in the last 12 months
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: We do not sell personal information (no opt-out needed)
• Right to Non-Discrimination: We will not deny service or charge different prices for exercising your rights

How to Submit a CCPA Request:

Email support@runpools.com with "CCPA Request" in the subject line. Include your full name, email, and the specific right you wish to exercise. We will respond within 45 days.