Scorepad Privacy Policy

Scorepad (“Scorepad,” “we,” “us,” or “our”) operates a multi-sided tournament management, live-scoring, e-commerce, and sponsorship platform accessible via our mobile application and website. This Privacy Policy details how we collect, use, process, and disclose personal data when you interact with our platform as a Player, Tournament Organizer, Merchandise Vendor / Merchant, or Corporate Sponsor / Brand Partner.

1. Information We Collect

A. Information You Provide Directly

• Player Accounts: Full name, email address, phone number, profile image, date of birth, gender, home club, handicap index, and emergency contact details.
• Organizer Accounts: Organizer/entity name, representative contact information, tax identification numbers, banking and payout details, and tournament venue agreements.
• Merchant Accounts: Business registration details, merchant trade name, contact information, billing addresses, tax credentials, and payout account information.
• Sponsor Accounts: Company profile, industry vertical, authorized company representatives, contact details, corporate billing data, target audience parameters, and marketing asset files.
• Financial & Payment Information: Payment card numbers, digital wallet tokens, and transaction histories. Note: Sensitive payment card transactions are tokenized and processed via certified third-party payment gateways (e.g., Stripe, Razorpay); Scorepad does not store raw credit/debit card numbers on its servers.

B. Information Generated Through Platform Use

• Tournament Gameplay & Scores: Real-time hole-by-hole scores, competition achievements (e.g., longest drive, closest-to-the-pin), attestation signatures, handicap calculation inputs, and tournament leaderboard standings.
• Marketplace Orders: Shipping and billing addresses, purchase items, order quantities, delivery preferences, tracking numbers, and fulfillment records.
• Sponsorship Deliverables: Proof-of-execution submissions uploaded by organizers (such as geo-tagged photos of on-course branded signage, hole-in-one car displays, apparel distribution, and event banners).
• Demographic & Profile Aggregations: Age brackets, geographic regions, handicap segments, and aggregated event participation levels.

C. Automatically Collected Information

• Precise and Approximate Geolocation: Collected with your explicit device permission to display local tournaments near you, confirm on-course tee locations, or support vendor deliveries.
• Device and Usage Data: Device identifiers (IDFA, Android ID), IP address, operating system, app crashes, and usage logs.

2. How We Use Your Information

We process personal data for the following operational, commercial, and legal purposes:

• Core Tournament Execution: Registering players, processing entry fees, generating pairings and tee sheets, running live leaderboards, calculating gross/net scores, and verifying handicaps.
• Marketplace Fulfillment: Enabling organizers and players to place orders for tournament merchandise, golf gear, and goodie bags, routing fulfillment requests to merchants.
• Sponsorship Discovery & Proof Verification: Allowing brands to identify tournaments matching target demographic segments and facilitating proof-of-performance reviews between organizers and sponsors.
• Platform Security & Integrity: Preventing fraud, authenticating account access, enforcing tournament rules, and resolving payout disputes.
• Legal and Regulatory Compliance: Maintaining financial ledgers, computing applicable sales/tax duties, and complying with statutory obligations.

3. Data Sharing and Disclosure

Scorepad connects multiple distinct user roles. Personal data is shared strictly as necessary to fulfill contractual obligations, administer tournaments, and facilitate transactions:

Scorepad does not sell personal player information to third-party data brokers.

4. Legal Bases for Processing (GDPR, DPDP, and Applicable Privacy Frameworks)

We process personal information under the following legal frameworks:

• Contractual Necessity: Processing is required to perform our contract with you (e.g., registering you for a tournament, managing scorecards, or shipping purchased gear).
• Legitimate Interests: Operating fair play and anti-cheat mechanisms, securing platform infrastructure, measuring app performance, and providing aggregated metrics to prospective event sponsors.
• Consent: For collecting precise background GPS location, delivering direct marketing notifications, or sharing player-specific lead lists with corporate sponsors.
• Legal Obligation: Retaining tax receipts, commercial invoices, and financial records as mandated by applicable national laws.

5. Data Retention and Security

Retention Lifespans: Active account data is maintained for the life of your account. Transaction and payout logs are retained for standard statutory accounting periods (typically 5 to 7 years). Historical competition scores and leaderboards remain archived indefinitely to preserve historical tournament records, unless explicitly requested for deletion.

Security Controls: We implement TLS 1.3 encryption for data in transit, AES-256 encryption for data at rest, role-based access control (RBAC), and continuous monitoring to guard against unauthorized access, data alteration, or breach.

6. User Rights and Choices

Depending on your local jurisdiction, you have the following rights regarding your personal data:

• Access & Portability: Request a copy of your personal profiles, scores, and purchasing records in a structured, machine-readable format.
• Correction: Rectify outdated or incorrect contact details, handicap ratings, or profile information.
• Erasure (“Right to be Forgotten”): Request account deletion. When an account is deleted, personal identifiers are permanently scrubbed or pseudonymized (public leaderboard historical references may be anonymized to maintain tournament integrity).
• Consent Revocation: Revoke device permissions for location services, camera access (for scorecards/proof submissions), and marketing alerts via device settings.
• Opt-Out of Profiling: Opt out of having your demographic information included in aggregated sponsor matching packages.

7. International Data Transfers

Scorepad operates across cloud infrastructure distributed globally. If you access the platform from outside the host region of our primary servers, your data may be transferred, stored, and processed across international borders under Standard Contractual Clauses (SCCs) or adequacy decisions ensuring equivalent data protection safeguards.

8. Updates to This Policy

We may update this Privacy Policy to reflect modifications to platform features, regulatory updates, or changes in data processing workflows. Material changes will be communicated via in-app notifications or registered email at least 15 days before taking effect. Continued use of Scorepad past the revision date signifies acceptance of the updated terms.

9. Contact Us and Data Protection Officer

For questions, requests to exercise statutory data rights, or privacy-related complaints, contact our Data Protection Office:

• Data Protection Officer (DPO): hello@kollcorp.com
• Scorepad Legal & Compliance: Koll Corp Services Pvt. Ltd.
• In-App Support: Navigate to Settings > Privacy & Support > Submit Data Request