Privacy Policy

Last updated: September 29, 2026

Back9Ops is a golf operations platform for courses, leagues, and events. This policy explains what information we collect, how we use it, and your choices. We keep it simple — we collect only what we need to run the service.

Who We Are

Back9Ops is operated by Back9ops LLC, Lake City, MN 55041. You can reach us at sales@back9ops.com.

What We Collect

Account Information

When you create an account we collect your name, email address, and a securely hashed password. We never store your password in plain text. A club or league that adds you to its roster may also enter your name, email, phone number, and handicap.

Golf Data

We store scores, handicap index, round history, league and event participation, team assignments, and registration details. This is the core data needed to run your tournaments and leagues.

Location (phone app only)

The phone app can use your device's precise location while you are using the app to measure distances on the course. We do not track your location in the background and do not share location data with anyone. You can deny location permission and still use every other feature of the app.

Push Notification Tokens

If you allow notifications, your device receives a push token from Apple or Google. We store that token to send you scoring updates, tee time reminders, and round results. You can turn off notifications at any time in your device settings.

Payment Information

Back9Ops subscriptions (Player+, League, Club) are billed by Stripe. When you pay a club through Back9Ops — an entry fee, a tee time, league dues — the payment goes to that club's own Stripe, Square, or Clover account. We never see or store your card number. We keep only the processor's customer reference and the payment status.

Device, Usage, and Crash Data

We log basic technical information (IP address, browser or app version, operating system, error logs) to keep the service running reliably. If the phone app crashes, the screen you were on and technical details about the failure are sent to us so we can fix it. We do not use advertising trackers and we do not sell this data.

Cookies and Similar Technologies

Back9Ops uses only the cookies it needs to work. There is no advertising cookie, no analytics tracker, and no third-party marketing cookie anywhere on app.back9ops.com or www.back9ops.com.

• Sign-in cookie — keeps you signed in. Removed when you sign out
• Security cookie — a short-lived token that protects forms from forgery
• Cloudflare Turnstile — the contact form on www.back9ops.com uses Cloudflare Turnstile to block automated abuse. Cloudflare may set a cookie to do that
• Theme choice — your light or dark setting is kept in your browser's local storage and never leaves your device

Because every cookie is strictly necessary, we do not show a cookie banner — blocking them would stop the service from working. You can clear them at any time in your browser.

How We Use Your Information

• Run your events, leagues, tee times, and scorecards
• Calculate handicaps and standings
• Send you the emails and notifications your events depend on (confirmations, pairings, tee times, results)
• Process subscription and club payments
• Respond to your questions and support requests
• Fix bugs and improve the service
• Comply with the law and protect against fraud or abuse

We do not sell your information. We do not use it for advertising.

Who We Share Data With

We share data only with vendors that help us operate the service:

• Hosting — managed servers with encrypted connections and access limited to authorized personnel
• Maileroo — delivers account and event emails
• Stripe, Square, Clover — process payments; we never see your card details
• Google Firebase — delivers push notifications to phones that have opted in
• Google Firebase Crashlytics — receives crash reports from the phone app
• GolfCourseApi — looks up published course scorecard information
• Amazon Web Services and Cloudflare — serve www.back9ops.com and protect our web forms from automated abuse
• Apple and Google — distribute the phone app through their stores

These vendors may use your data only to provide their service to us. Beyond what is visible inside the product itself (for example, your score on a leaderboard, or your name on a club's roster), we do not share your data with marketers, advertisers, or unrelated third parties. We disclose data when the law requires it or to protect our rights.

Your Rights and Choices

• Access and port: download a file of the personal data on your account at any time — on the web, under Account › Personal data › Download
• Correct: update your name, email, phone, and photo on your profile
• Delete: delete your account yourself, whenever you like — on the web under Account › Personal data › Delete, or in the app under Profile › Delete account. Your login is removed right away and your name, email, phone, and photo are scrubbed from any shared history (a score you posted stays on its leaderboard as "Deleted Player"). Anything we must keep for legal or financial compliance is removed within 30 days
• Location: deny or revoke location permission in your device settings at any time
• Notifications: turn them off in your device settings or on your profile at any time
• Email: every club broadcast carries a one-click unsubscribe link; emails your events depend on (confirmations, pairings, tee times) may still be sent while you take part

If you would rather we do any of this for you, email sales@back9ops.com and we will handle it within 30 days.

Children

Back9Ops is not directed at children under 13, and we do not knowingly collect personal information from anyone under 13. Golfers aged 13 to 17 may use Back9Ops only with a parent or guardian's agreement, as our Terms of Service explain. A junior rate on a tee sheet is chosen by the adult making the booking. If you believe a child has given us personal information, contact us and we will delete it.

Data Retention

We keep your account and golf data for as long as your account is active. Usage logs are kept for 90 days. If you delete your account, we remove your personal information as described above, except where we are required to keep records for legal or financial compliance. We may keep anonymized data indefinitely to improve the service.

Payment records (the amount, the date, whether it went through and the processor's reference, never your card) are kept for 7 years after their last change, even if you delete your account, because the club needs them for taxes and payment disputes. Then they are deleted.

Security

We use HTTPS for all data in transit, hashed passwords, and token-based authentication. The database is backed up in full every night and each backup is checked before it is stored. No system is perfectly secure, but we take reasonable steps to protect your information, and we will notify you if a breach affects you.

Changes to This Policy

If we make material changes we will update the date at the top of this page and, where appropriate, notify you by email or in-app message.

Contact Us

Questions about this policy? Email us at sales@back9ops.com. The full Terms of Service live at www.back9ops.com.