Privacy Policy

1. Who we are

Course Correct (“Course Correct,” “we,” “us,” or “our”) provides 3D course intelligence and an AI caddie for golf courses and their players, through our marketing site at coursecorrect.io, our application hosted on per-club subdomains (e.g. yourclub.coursecorrect.io), and the Course Correct mobile app, which shows your club’s site. This policy explains what personal information we collect, how we use and share it, and the choices and rights you have.

The data controller is Elias Immersive. If your golf club provides this service to you, the club may also be a controller of your information; please also review the club’s own privacy notice.

2. Information we collect

You can browse a course in the viewer without an account. We collect personal information in the following ways:

a. Account information

When you create an account or sign in, our authentication provider (Clerk) collects and stores your name and email address, and the credentials or third-party sign-in (e.g. Google) you use to authenticate. We receive your account identifier and basic profile from Clerk; we do not store your password.

b. Player profile (optional)

If you choose to personalize your caddie, we store the profile fields you provide: display name, handicap, club carry distances, the clubs in your bag (including make/model if you add it), handedness, typical shot shape, miss tendency and dispersion, ball flight, risk tolerance, your goal for the round, tee preference, and unit preference. Every field is optional.

c. Round and shot data

If you track a round, we store the geographic locations (latitude/longitude) of your shots on each hole so your round syncs across your devices. This is location data about where you played on the course.

d. Caddie interactions

When you ask the AI caddie a question, we keep the question as you typed it (up to 500 characters), the hole you were on, and the kind of question it was, so your club can see what its golfers ask about. The club’s staff see the questions without your name or account. We do not keep the caddie’s answer unless you rate it: then we keep your rating (a thumbs up or down), any comment you add, and the question and answer it was about, so we can review and improve the advice.

e. Text messaging (Text the Pro)

If you opt in to the Text the Pro SMS program (see coursecorrect.io/sms), we store your mobile number, your consent and opt-out status, the messages you send and receive, the hole you said you were on, and any photos you text. We use them only to answer you and to keep the conversation across a round. Your number is never sold or shared for marketing, and we send messages only in reply to yours.

f. Location

If you allow it, we use your phone’s location while you are using the service, never in the background. “Yardage from here” works out the distance from where you stand to the green on your phone; that location is not sent to us. If you are on a club’s team and you report an issue from the course, the spot is saved with the issue, as part of the club’s records. You can withdraw location access at any time in your browser or phone settings.

g. Notifications in the app

If you turn on notices in the Course Correct app, we store your phone’s push token (an address the app’s notification service gives your phone) and whether it is an iPhone or an Android phone, so we can send them:

• Golfers: a notice when your course publishes the day’s pin positions. The token is kept with the course only, not with your name or account.
• Club staff: notices about issues assigned to you and yours that are past due. The token is kept with your account and the sign-in you turned notices on from, and notices stop when that sign-in ends or you leave the club’s team.

You can turn notices off in the app or in your phone’s settings.

h. On your phone

The app keeps two things on your phone: the club you last opened, and the answers you gave about your game, so the next club you open can use them. The app does not send either to us; each club’s site uses your answers as described above.

i. Club staff

If you are on a club’s team, the issues you log (their text, photos, and position on the course) are the club’s records, and the club’s staff can see them. We email you, and notify you in the app if you turn notices on, about issues assigned to you.

j. Technical and usage data

We automatically collect limited operational data: your IP address (used transiently for rate limiting and abuse prevention), device and browser information, log and error diagnostics, and aggregate usage analytics. See “Cookies” below.

3. How we use your information

• To provide, operate, and secure the service and your account.
• To personalize the AI caddie’s advice using your profile and round data.
• To sync your profile and rounds across your devices.
• To show distances from where you stand, and to send the notices you turn on in the app.
• To improve our features, prompts, and models using caddie interactions and feedback.
• To monitor performance, debug errors, prevent abuse, and enforce rate limits.
• To communicate with you about the service, and to comply with legal obligations.

Our legal bases (where GDPR applies) are performance of a contract (operating your account), your consent (the optional profile and round personalization), and our legitimate interests (security, abuse prevention, and product improvement). You may withdraw consent at any time by deleting your profile data (see “Your rights”).

4. AI and automated processing

The AI caddie, and the written notes on a game plan and a practice round, send relevant context to a third-party large language model provider (Anthropic, accessed via the Vercel AI Gateway) to generate advice. This context includes your golf profile attributes (such as handicap, club distances, and tendencies), your question, and, for Text the Pro, your recent messages and any photo you texted. In the app, we ask before the first time any of this is sent.

We do not send your name to the AI provider. The caddie does not make legal or similarly significant decisions about you. Its advice is informational and may be imperfect — use your own judgment on the course.

5. How we share information

We do not sell your personal information for money. Account, profile, round, caddie and text-message data is never used for advertising, and mobile numbers are never shared for marketing. On our marketing site at coursecorrect.io only, we use LinkedIn’s advertising tag (see “Cookies and similar technologies” below). Otherwise we share information only with service providers (processors) that help us run the platform, under contracts that limit their use of it:

Expo passes each notice to Apple’s or Google’s notification service, which delivers it to your phone. We may also disclose information if required by law, to protect our rights or users’ safety, or in connection with a merger, acquisition, or sale of assets. If your club administers your access, relevant course and account data may be visible to the club’s authorized administrators.

6. Cookies and similar technologies

We use strictly necessary cookies for authentication and session management (set by Clerk), and limited analytics to understand usage. You can control cookies through your browser settings; disabling necessary cookies may prevent you from signing in.

Our marketing site at coursecorrect.io (not the course application on club subdomains) loads the LinkedIn Insight Tag. It sets cookies and tells LinkedIn which pages of the marketing site a browser visited, so we can measure our LinkedIn advertising and show it to relevant professional audiences. LinkedIn handles this under its own privacy policy. You can opt out in LinkedIn’s ad settings, and the tag does not load for browsers that send a Global Privacy Control signal. When you request a demo, we keep the campaign link you arrived from and the first page you visited with your request.

7. Data retention

We keep your profile and round data for as long as your account is active or as needed to provide the service. When you delete your data or account, we remove your profile and saved rounds, and we detach your identity from any retained caddie feedback. The questions you ask the caddie are kept for 400 days; if you were signed in, deleting your data or account erases their text and your identity from them. Text the Pro conversations and texted photos are deleted after twelve months; your number and consent record are deleted when you delete your data or account. A phone’s push token is deleted when you turn notices off, when you delete your account, when you leave a club’s team (for staff notices), or after 120 days without the app checking in. We may retain limited records as required for legal, security, or accounting purposes.

8. Your rights and choices

You can review and edit your profile at any time in the app, and use “Delete my data” in the profile panel to erase your profile and saved rounds. Deleting your account (via account settings) also triggers deletion of this data.

Depending on where you live, you may have rights to access, correct, delete, port, or restrict processing of your personal information, and to object to certain processing — including under the GDPR (EEA/UK) and CCPA/CPRA (California). California residents have the right not to receive discriminatory treatment for exercising these rights; note that we do not sell personal information. Our use of the LinkedIn Insight Tag on the marketing site may be “sharing” for cross-context behavioral advertising as California law defines it; you can opt out as described under “Cookies and similar technologies” or by emailing us. To exercise any right, contact us at judson@coursecorrect.io. You may also have the right to lodge a complaint with your local data protection authority.

9. Security

We protect your information with measures including encrypted transport (HTTPS), access controls, authentication, and tenant isolation between clubs. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. International transfers

We and our providers may process your information in countries other than your own, including the United States. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for these transfers.

11. Children's privacy

The service is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. We will revise the “Last updated” date above and, for material changes, provide a more prominent notice.

13. Contact us

Questions or requests? Contact us at judson@coursecorrect.io.