Privacy Policy
Last updated: June 30, 2026
1. Who we are
CourseCorrect (“CourseCorrect,” “we,” “us,” or “our”) provides 3D course intelligence and an AI caddie for golf courses and their players, through our marketing site at coursecorrect.io and our application hosted on per-club subdomains (e.g. yourclub.coursecorrect.io). This policy explains what personal information we collect, how we use and share it, and the choices and rights you have.
The data controller is Elias Immersive. If your golf club provides this service to you, the club may also be a controller of your information; please also review the club’s own privacy notice.
2. Information we collect
You can browse a course in the viewer without an account. We collect personal information in the following ways:
a. Account information
When you create an account or sign in, our authentication provider (Clerk) collects and stores your name and email address, and the credentials or third-party sign-in (e.g. Google) you use to authenticate. We receive your account identifier and basic profile from Clerk; we do not store your password.
b. Player profile (optional)
If you choose to personalize your caddie, we store the profile fields you provide: display name, handicap, club carry distances, the clubs in your bag (including make/model if you add it), handedness, typical shot shape, miss tendency and dispersion, ball flight, risk tolerance, your goal for the round, tee preference, and unit preference. Every field is optional.
c. Round and shot data
If you track a round, we store the geographic locations (latitude/longitude) of your shots on each hole so your round syncs across your devices. This is location data about where you played on the course.
d. Caddie interactions
When you use the AI caddie, we store the questions you ask, the answers given, and any feedback you submit (a thumbs up/down and optional comment) so we can review and improve the advice.
e. Technical and usage data
We automatically collect limited operational data: your IP address (used transiently for rate limiting and abuse prevention), device and browser information, log and error diagnostics, and aggregate usage analytics. See “Cookies” below.
3. How we use your information
- To provide, operate, and secure the service and your account.
- To personalize the AI caddie’s advice using your profile and round data.
- To sync your profile and rounds across your devices.
- To improve our features, prompts, and models using caddie interactions and feedback.
- To monitor performance, debug errors, prevent abuse, and enforce rate limits.
- To communicate with you about the service, and to comply with legal obligations.
Our legal bases (where GDPR applies) are performance of a contract (operating your account), your consent (the optional profile and round personalization), and our legitimate interests (security, abuse prevention, and product improvement). You may withdraw consent at any time by deleting your profile data (see “Your rights”).
4. AI and automated processing
The AI caddie sends relevant context to a third-party large language model provider (Anthropic, accessed via the Vercel AI Gateway) to generate advice. This context includes your golf profile attributes (such as handicap, club distances, and tendencies) and your question.
We do not send your name to the AI provider. The caddie does not make legal or similarly significant decisions about you. Its advice is informational and may be imperfect — use your own judgment on the course.
5. How we share information
We do not sell your personal information, and we do not use it for third-party advertising. We share it only with service providers (processors) that help us run the platform, under contracts that limit their use of it:
| Provider | Purpose | Data involved |
|---|---|---|
| Clerk | Authentication & account management | Name, email, login identity |
| Neon | Database hosting | Profile, rounds, caddie feedback |
| Vercel | App hosting, file storage, analytics | All app data; usage/telemetry |
| Anthropic (via Vercel AI Gateway) | AI caddie responses | Profile attributes & questions (not your name) |
| Sentry | Error monitoring | Diagnostic/error data |
| Upstash | Rate limiting | Transient request/IP data |
We may also disclose information if required by law, to protect our rights or users’ safety, or in connection with a merger, acquisition, or sale of assets. If your club administers your access, relevant course and account data may be visible to the club’s authorized administrators.
6. Cookies and similar technologies
We use strictly necessary cookies for authentication and session management (set by Clerk), and limited analytics to understand usage. You can control cookies through your browser settings; disabling necessary cookies may prevent you from signing in.
7. Data retention
We keep your profile and round data for as long as your account is active or as needed to provide the service. When you delete your data or account, we remove your profile and saved rounds, and we detach your identity from any retained caddie feedback. We may retain limited records as required for legal, security, or accounting purposes.
8. Your rights and choices
You can review and edit your profile at any time in the app, and use “Delete my data” in the profile panel to erase your profile and saved rounds. Deleting your account (via account settings) also triggers deletion of this data.
Depending on where you live, you may have rights to access, correct, delete, port, or restrict processing of your personal information, and to object to certain processing — including under the GDPR (EEA/UK) and CCPA/CPRA (California). California residents have the right not to receive discriminatory treatment for exercising these rights; note that we do not sell or “share” personal information as those terms are defined under California law. To exercise any right, contact us at judson@eliasimmersive.com. You may also have the right to lodge a complaint with your local data protection authority.
9. Security
We protect your information with measures including encrypted transport (HTTPS), access controls, authentication, and tenant isolation between clubs. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
10. International transfers
We and our providers may process your information in countries other than your own, including the United States. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for these transfers.
11. Children's privacy
The service is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.
12. Changes to this policy
We may update this policy from time to time. We will revise the “Last updated” date above and, for material changes, provide a more prominent notice.
13. Contact us
Questions or requests? Contact us at judson@eliasimmersive.com.
This document is provided as a starting template and does not constitute legal advice. Have it reviewed by qualified counsel for your jurisdiction and business before relying on it.