Privacy Policy

1. Information We Collect

1.1 Information You Provide to Us

Contact form submissions. When you fill out the contact form on simbrackets.com, we collect:

• Your name
• Email address
• Discord server name (optional)
• Server size (optional)
• Plan interest (optional)
• Message content

Account information via Discord OAuth. When you create an account by signing in with Discord, we receive from Discord:

• Your Discord user ID and username
• Your Discord display name and avatar
• Your email address as registered with Discord
• A list of Discord servers you are a member of (used to associate you with the appropriate tenant; we do not retain detailed server information beyond what is needed for authentication and authorization)

The specific data we receive is governed by the OAuth scopes you authorize during sign-in. You can review and revoke this access at any time in your Discord account settings.

Subscription and payment information. If you subscribe to a paid plan, we collect billing information including your name, billing address, and payment method details. Payment card details are collected and stored by our payment processor (Stripe), not by us. We retain limited information including a payment processor customer ID, the last four digits of your card, and transaction records.

1.2 Information Generated Through Use of the Service

When you use SimBrackets, the Service generates and stores data including:

• Tournament configurations (brackets, courses, settings)
• Match results and scores
• Handicap and statistical data
• Scheduling and notification preferences
• Activity within your tenant

1.3 Information We Collect Automatically

When you access the Service, we automatically collect certain technical information:

• IP address and approximate location (derived from IP)
• Browser type and version
• Device type and operating system
• Pages visited, features used, and timestamps
• Referring URLs
• Server logs and error reports

This information is used for security, fraud prevention, debugging, and improving the Service.

1.4 Cookies and Similar Technologies

We use cookies and similar technologies to:

• Authenticate you and maintain your login session
• Remember your preferences
• Analyze usage of the Service

We currently do not use third-party advertising or behavioral tracking cookies. If we add analytics or similar technologies in the future, we will update this Privacy Policy and provide notice. You can disable cookies through your browser settings, but doing so may affect Service functionality.

2. How We Use Information

We use the information we collect to:

• Provide and operate the Service, including authentication, hosting your tournaments, sending notifications, and processing payments
• Communicate with you about your account, updates to the Service, billing, customer support inquiries, and product announcements
• Improve and develop the Service, including troubleshooting, analyzing usage patterns, and developing new features
• Maintain security, including detecting and preventing fraud, abuse, and unauthorized access
• Comply with legal obligations, including tax, accounting, and regulatory requirements
• Enforce our Terms and protect our rights, property, and safety, and that of our users and others

3. How We Share Information

We do not sell personal information.

We share information with:

3.1 Service Providers

We share information with third parties that provide services to us, including:

• Discord for authentication
• Stripe for payment processing (when paid plans are activated)
• Google (via Gmail) for email notifications
• Cloudflare for content delivery, DNS, and security
• Hosting providers for our infrastructure

These providers are bound by contractual obligations to use information only as needed to provide their services to us.

3.2 Within Your Tenant

Information you submit through the Service may be visible to other authorized users within your tenant (your sim golf community). For example, tournament participants will see brackets, match results, and other tournament-related data.

3.3 Legal Requests

We may disclose information when required by law, subpoena, court order, or other legal process, or to protect our rights, property, or safety, or that of our users or others.

3.4 Business Transfers

If we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.

3.5 With Your Consent

We may share information with other third parties when you have given us your consent to do so.

4. Data Retention

• Active accounts: We retain your information for as long as your account is active.
• After termination: Following account termination, we retain User Content for thirty (30) days to allow for potential reactivation or data export, after which it is deleted from our active systems. Backups may persist for an additional period not to exceed ninety (90) days.
• Financial and tax records: We retain billing, tax, and accounting records for at least seven (7) years as required by law.
• Legal holds: We may retain information longer when required by law or to address ongoing legal matters.

5. Your Rights and Choices

5.1 Universal Rights

Regardless of your location, you may:

• Review and update your account information through your account settings
• Request a copy of your User Content via export tools or by contacting us
• Delete your account at any time, subject to data retention requirements in Section 4
• Opt out of marketing emails by following the unsubscribe link in any marketing email; transactional emails (billing, security, account changes) will continue

5.2 Rights Under California Privacy Laws (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose
• Request deletion of your personal information
• Correct inaccurate personal information
• Opt out of any "sale" or "sharing" of personal information (we do not sell or share personal information for cross-context behavioral advertising)
• Be free from discrimination for exercising these rights

5.3 Rights Under European Privacy Laws (GDPR)

If you are in the European Economic Area, United Kingdom, or Switzerland, you have the right to:

• Access your personal data
• Rectify inaccurate or incomplete personal data
• Erase your personal data ("right to be forgotten")
• Restrict processing of your personal data
• Object to processing of your personal data
• Data portability
• Withdraw consent at any time where processing is based on consent
• Lodge a complaint with a supervisory authority

The legal bases on which we process personal data include: performance of a contract (to provide the Service), our legitimate interests (improving the Service, fraud prevention), consent (where applicable, such as marketing emails), and compliance with legal obligations.

5.4 How to Exercise Your Rights

To exercise any of these rights, contact us at [email protected]. We will respond within the timeframes required by applicable law (typically 30-45 days).

6. Children's Privacy

The Service is intended for users 18 years of age and older. We do not knowingly collect personal information from anyone under 18. If you believe we have collected information from a minor, please contact us at [email protected] and we will delete it.

7. International Data Transfers

We are based in the United States, and the information we collect may be transferred to and stored on servers in the United States or other countries. By using the Service, you consent to such transfers. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for international data transfers.

8. Security

We implement reasonable technical and organizational measures designed to protect personal information from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

If we become aware of a security breach affecting your personal information, we will notify you in accordance with applicable law.

9. Third-Party Services and Links

The Service may contain links to third-party websites or services (including Discord). We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing them with your information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by posting the updated Policy on simbrackets.com with a revised "Last Updated" date and, where reasonable, by email. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

11. Contact

For questions about this Privacy Policy or our privacy practices, or to exercise your rights, contact us at:

KW Golf LLC
Vancouver, Washington, USA
Email: [email protected]