Privacy Policy

Backswing, Inc. ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how your personal information is collected, used, and disclosed by Backswing. It applies to our website/app and associated subdomains (collectively, our "Service"). By accessing or using our Service, you signify that you have read, understood, and agree to our collection, storage, use, and disclosure of your personal information as described here and in our Terms & Conditions.

This Policy is designed to comply with U.S. state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, "CCPA/CPRA"), and the comprehensive privacy laws of other states where we operate.

Definitions and key terms

• Company / we / us / our: Backswing, Inc., 2784 W 2650 N, Clinton, UT 84015, responsible for your information under this Policy.
• Country: United States.
• Cookie: a small amount of data saved by your web browser used to identify your browser, provide analytics, and remember information about you.
• Device: any internet-connected device used to access the Service.
• IP address: a number assigned to each device connected to the Internet, which can be used to estimate general location.
• Personal Data / Personal Information: information that directly or indirectly identifies, or could reasonably be linked to, a natural person.
• Service: the service provided by Backswing.
• Third-party service: advertisers, sponsors, marketing partners, and others who provide content or whose products or services may interest you.
• You: a person or entity registered with Backswing to use the Services.

What information do we collect?

We collect information when you visit our website/app, register, place an order, subscribe to communications, respond to a survey, or contact us, including:

• Name / username
• Phone number
• Email address
• Billing address
• Payment card information (see "Payment information" below)
• Age
• Password

We also collect the following from mobile devices, all of which are optional and permission-based:

• Location (GPS): to show nearby Courses and relevant content.
• Contacts: to make it easier to invite others to a booking (you can deny this).
• Camera / Photo Gallery: to let you upload pictures (you can deny this).

We also collect certain information automatically, such as device and usage data (IP address, device identifiers, app version, and interactions with the Service).

Payment information

When you make a purchase, we collect the information needed to process your payment. Card payments are processed by our third-party payment processor, Stripe, Inc. Your full card number, security code (CVV), and related sensitive card details are transmitted to and stored by Stripe within its PCI-DSS certified environment. We do not store your full card number on our own systems.

You may choose to save a card for future purchases ("Card on File"). We save a card only if you affirmatively opt in, and we ask for your consent at the point you enter your payment details, separately from our general terms, before any card is saved. When you opt in, we store a secure reference (token) to the card held by Stripe, together with limited details such as the card brand, the last four digits, and the expiration date, and a record of your consent (including the date, the scope of your authorization, and the version of our terms in effect). We use this information to let you select a saved card, to process purchases you initiate, to issue refunds to your card on file, to prevent fraud, and to resolve disputes and chargebacks. You can view or remove a saved card — and withdraw your consent to store it — at any time in the app under Profile → Payment Methods.

We do not sell your payment card information, and we do not share it for cross-context behavioral or targeted advertising.

How do we use the information we collect?

We use the information we collect to:

• personalize your experience and respond to your needs;
• provide, operate, and improve the website/app and process your bookings and payments;
• authenticate you, secure your account, and prevent fraud and abuse;
• facilitate group bookings and split payments among members you choose to involve;
• provide customer service and respond to support requests;
• administer contests, promotions, or surveys; and
• send account, transactional, and (where you opt in) marketing communications.

Do we share the information we collect with third parties?

We may share information with:

• Courses, to fulfill your bookings (for example, your name and booking details);
• our Payment Provider (Stripe), to process payments and manage Stored Payment Methods;
• service providers that host, support, analyze, or help operate the Service, under contracts restricting their use of the information (including hosting, database management, email, payment processing, customer service, and order fulfillment);
• group members, limited information (such as your name and payment status) for a booking you organize or join;
• advertising and analytics partners, as described under "Advertising and cookies" below;
• government or law enforcement, or private parties, where we believe in good faith it is necessary to comply with law or legal process, protect rights or safety, or prevent illegal activity; and
• a successor, in connection with a merger, financing, acquisition, or sale of assets, subject to this Policy.

We do not sell your payment card information. For information about advertising activity that may be considered a "sale" or "sharing" of other categories of personal information, and how to opt out, see "Advertising and cookies" and "Your privacy rights."

How do we use your email address?

By submitting your email address, you agree to receive emails from us. You can unsubscribe from marketing emails at any time using the opt-out link in each email. We only email people who have authorized us to contact them and do not send unsolicited commercial email.

We may also use a hashed version of your email to show you relevant advertising on third-party platforms (for example, custom-audience advertising on platforms such as Facebook). Depending on your state, this activity may be considered a "sale" or "sharing" of personal information or "targeted advertising." You can opt out of this activity as described under "Your privacy rights," including through an opt-out preference signal (see "Global Privacy Control"). Email addresses submitted only through the order-processing page are used solely to send you information and updates about your order.

Text messaging (SMS)

We send account, transactional, and (where you opt in) marketing text messages consistent with the SMS terms in our Terms & Conditions (TCPA, CTIA, and FCC). Message frequency varies; message and data rates may apply. Reply STOP to opt out and HELP for help, or contact info@backswing.ai. Backswing does not sell or share your mobile number with third parties for marketing purposes. Consent to receive SMS is not a condition of purchase.

Advertising and cookies

This website/app may contain third-party advertisements and links to third-party sites. Backswing does not endorse and is not responsible for the content, offerings, or quality of third-party ads or sites.

We and our partners use cookies and similar technologies (including local storage and sessions) to operate the Service, remember your preferences and login, measure performance, and support interest-based advertising and remarketing. Interest-based advertising uses information about your activity over time and across services to make ads more relevant. We never place personally identifiable information in cookies. Most browsers let you block or disable cookies; if you do, some functionality may become unavailable. Disabling a cookie does not delete it from your browser — you can do that from within your browser's settings.

Facebook Pixel and Google Maps API are third-party tools that may collect information from your device; each handles that information under its own privacy policy. We use the Facebook Pixel to measure ad effectiveness, and Google Maps API to provide mapping and location features.

Global Privacy Control (GPC). Where required by law, we honor the Global Privacy Control and similar opt-out preference signals sent through your browser as a valid request to opt out of the sale or sharing of your personal information.

How do we protect your information?

We implement administrative, technical, and physical safeguards designed to protect your personal information. Sensitive payment information is transmitted using encryption and is handled by our payment processor (Stripe) within a PCI-DSS certified environment; we do not store your full card number on our systems. No system is perfectly secure, and we cannot guarantee absolute security. You are responsible for keeping your password and account information confidential.

How long do we keep your information?

We keep your information only as long as needed to provide the Service and fulfill the purposes described in this Policy, after which we remove it from our systems or de-identify it, unless a longer period is required for legal, tax, accounting, fraud-prevention, or dispute-resolution purposes. In particular:

• Saved-card reference (token): kept until you remove the card, delete your account, or 12 months after your last activity, whichever comes first.
• Financial and transaction records: retained for up to 7 years to comply with U.S. tax and financial-reporting laws.
• Giveaway and past tee-time profile data: retained for up to 21 days for accurate record-keeping.
• Account deletion: processed as described in the Account deletion policy below.

Your privacy rights

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• Know / Access: the categories and specific pieces of personal information we collect, the sources, the purposes, and the categories of third parties with whom we share it;
• Correct: inaccurate personal information;
• Delete: personal information we have collected, subject to legal exceptions;
• Portability: obtain a copy of certain information in a portable format;
• Opt out of the "sale" or "sharing" of personal information and of targeted/cross-context behavioral advertising;
• Limit the use of sensitive personal information where applicable; and
• Non-discrimination: we will not discriminate against you for exercising your rights.

We do not sell the personal information of our users, and we do not sell payment card information.

How to submit a request

Email info@backswing.ai, or for deletion, submit an in-app request (see the Account deletion policy) or email info@backswing.ai with "Data Request" in the subject line. We verify requests by reasonable means (which may include confirming information associated with your account). You may use an authorized agent with proof of authorization. We respond within the time required by applicable law (generally 45 days, extendable where permitted).

Appeals

If we decline your request, you may appeal by replying to our decision or emailing info@backswing.ai with "Appeal" in the subject line. We will respond as required by your state's law.

California "Shine the Light"

California residents may request information about disclosures of personal information to third parties for their direct-marketing purposes by contacting info@backswing.ai.

State-specific notes

Residents of states with comprehensive privacy laws — including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others, as applicable — may exercise the rights above to the extent those laws apply. Where a law requires opt-in consent before processing sensitive personal information, we obtain that consent.

Children's privacy

The Service is intended for users 18 and older and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us personal information, contact info@backswing.ai and we will delete it.

International data transfers

Backswing is based in the United States, and the Service is intended for U.S. users. Information may be processed in the United States and, where our service providers operate, elsewhere. If you access the Service from outside the United States, you do so on your own initiative and are responsible for compliance with local laws.

Information for EEA/UK residents (GDPR)

If you are located in the European Economic Area or the United Kingdom, you have rights to access, correct, delete, restrict, port, or object to the processing of your personal data. We process personal data on lawful bases such as performance of a contract, consent, and legitimate interests, and use vetted, data-processing-agreement-compliant vendors. To exercise these rights, contact info@backswing.ai.

Account deletion policy

At Backswing, Inc., we respect your right to control your personal data. If you created an account through our mobile app, you may request deletion of your account and associated personal data at any time.

How to request deletion

• In-app: open the Backswing app, go to your profile picture, and select Delete Account; follow the prompts to confirm.
• Web/email: email info@backswing.ai to request deletion. Provide your account email address or other identifying information so we can verify your identity.
• Verification: we may require additional verification (such as a confirmation code sent to your registered email or phone) to confirm the request is legitimate.
• Processing time: once verified, we process account deletion within 7 business days and send a confirmation email. If it takes longer for technical or legal reasons, we will notify you of the expected timeline.

What happens when you delete your account

We permanently delete your account and associated personal data (such as email address, phone number, and username) from our systems, except for data we are permitted or required to retain as described below.

Data we may retain

• Financial records: transaction and purchase history, retained up to 7 years to comply with U.S. tax and financial-reporting laws.
• Compliance records: data required to comply with legal obligations, including fraud prevention and end-user license agreements.
• Aggregated/de-identified data: used for analytics and service improvement; cannot be linked back to you.
• Usage data: retained if there are outstanding payments due to Courses or Backswing, including fees and chargebacks associated with bookings.
• Giveaway and past tee-time data: retained up to 21 days for record-keeping and operational compliance.

Any retained data is handled in accordance with this Policy and applicable law.

Third-party services

Backswing is not responsible for the accuracy, legality, or quality of third-party content, links, or services, and assumes no liability for them. Your use of third-party services is at your own risk and subject to their terms and privacy policies.

Changes to this Privacy Policy

We may update this Policy to reflect changes to our Service and practices. Unless otherwise required by law, we will notify you (for example, through the Service) before material changes take effect, update the "Updated" date, and give you an opportunity to review them. Continued use of the Service after changes take effect means you accept the updated Policy.

Your consent

By using Backswing, registering an account, or making a purchase, you consent to this Privacy Policy and agree to its terms.

Pro Shop Caddie: AI voice agent and call information

Backswing provides Pro Shop Caddie, an AI voice agent that answers telephone calls placed to participating golf courses. If you call a golf course that uses Pro Shop Caddie, this section explains what we collect and how we use it.

You are told at the start of every call

Before any call is recorded, the Agent tells you that (a) you are speaking with an automated AI assistant, not a person, (b) the call is recorded and transcribed, and (c) you may ask to speak with a human at any time. If you do not consent, you may end the call or ask to be transferred to a person. We apply all-party (two-party) recording-consent standards to every call, in every state, regardless of where you are located.

What we collect on a call

• Audio recording of the call and a written transcript;
• your telephone number and call metadata (date, time, duration, outcome, whether the call was transferred);
• information you provide during the call, such as your name, the tee time or service you're asking about, and group details; and
• if you request a booking link, the mobile number you give us so we can text you that link.

What we do NOT collect: no voiceprints, no biometric identifiers

Pro Shop Caddie does not create, capture, collect, store, use, or disclose a voiceprint, biometric identifier, or biometric information. The Agent:

• does not perform speaker identification, speaker verification, or voice authentication;
• does not perform speaker diarization or analyze your vocal characteristics (pitch, timbre, cadence, resonance, or similar) to identify or distinguish you;
• does not create or store a biometric template from your voice; and
• does not use your call audio to train, fine-tune, or improve any voice model or foundational AI model.

Your speech is converted to text only to understand and answer your request. We do not sell caller information, and we do not share it for cross-context behavioral or targeted advertising.

How we use call information

To answer your question and complete your request; to transfer you to the right person; to send a booking link you asked for; to maintain the call log and transcript for the golf course; to improve the accuracy of the Agent's answers for that course; to prevent fraud and abuse; and to comply with law and resolve disputes.

Text messages

If you ask the Agent to text you a booking link, we send that single transactional message to the number you provide. We do not send marketing texts through Pro Shop Caddie, and we will not use a number collected on a call for marketing without your separate express consent. Reply STOP to opt out.

Who the information is shared with

• The golf course you called, which can view the call log, recording, and transcript in its dashboard;
• service providers (telephony, speech-to-text, AI model, hosting, and SMS providers) that process the call on our behalf under contracts restricting their use of the information and prohibiting them from using it to train their own models; and
• law enforcement or others, where required by law or to protect rights and safety.

Roles

The golf course you called is the business/controller for its call data; Backswing acts as the course's service provider/processor and processes call data only to provide the service, not for its own commercial purposes.

How long we keep it

Call recordings and transcripts are retained for 90 days, after which they are deleted or de-identified, unless a longer period is required to resolve a dispute, prevent fraud, or comply with law. Call metadata (such as date, duration, and outcome) may be retained longer in aggregated or de-identified form for reporting.

Your choices and rights

You may ask the Agent to transfer you to a person at any time, or hang up and call back during staffed hours. Subject to applicable law, you may request access to, correction of, or deletion of the call information associated with your phone number by emailing info@backswing.ai with the course you called and the approximate date and time. You may also contact the golf course directly. See "Your privacy rights" above for the full list of rights and our response timelines.

Contact us

Backswing, Inc.
2784 W 2650 N
Clinton, UT 84015
United States
info@backswing.ai