ShotReceipt ("we," "us," or "our") operates the ShotReceipt platform, including the web application at app.shotreceipt.com, the ShotReceipt desktop application, and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your information.

1. Information We Collect

Information You Provide

  • Account Information: Name, email address, phone number, and password when you create an account (as an operator, employee, or guest).
  • Payment Information: Billing details processed through Stripe. We do not store credit card numbers on our servers.
  • Guest Information: Name, email, phone number, and golf simulator tracking identifiers (e.g., SGT username) provided at a facility or during guest registration.
  • Communications: Any messages you send to us via email or support channels.

Information Collected Automatically

  • Recordings and Media: Video recordings and screenshots captured by the ShotReceipt desktop application at participating facilities, uploaded to our video (Mux) and image (Cloudflare R2) hosting providers.
  • Round and Scorecard Data: Golf simulator session data including course, scores, hole-by-hole statistics, player names, and game settings.
  • Usage Data: Feature usage, session activity, and interaction logs used to enforce plan limits and improve the Service.
  • Device Information: Hardware identifiers from computers running the ShotReceipt desktop application, used for activation and licensing.
  • Calendar Reservation Data: If a facility connects a Google Calendar to receive reservations from its booking vendor, we read events from the one calendar the facility selects. From each event we keep the title, description, location, start and end times, time zone, status, and Google's event identifiers. We do not read or store attendees, organizer, conference links, or attachments. Reservation titles written by a booking vendor may contain a guest's name. See "Google Calendar" in Section 3.

2. How We Use Your Information

We use collected information to:

  • Provide, maintain, and improve the Service.
  • Process recordings, scorecards, and media uploads on behalf of facilities.
  • Turn a facility's calendar reservations into bay bookings, so the booked simulator bay is reserved, unlocked, and locked at the scheduled time and the guest's session is attributed to them.
  • Enable guest access to recordings, rounds, and share links.
  • Process payments and manage subscriptions.
  • Send transactional communications, including magic-link login emails, share link notifications, purchase confirmations, and SMS messages (with your consent).
  • Enforce usage limits and subscription terms.
  • Detect and prevent fraud or abuse.

3. How Your Information Is Shared

With Facility Operators and Staff

When you visit a facility that uses ShotReceipt, the following personnel may view and share your recordings, scorecards, and guest profile information:

  • ShotReceipt Platform Administrators — staff who manage the ShotReceipt platform.
  • Operator Owners — the business entity that operates the facility you visited.
  • Facility Managers and Employees — staff at the specific facility, with access scoped to their assigned roles and permissions.

These parties may view your recordings, share your videos and screenshots via share links, and access your round scorecards in connection with the services provided at their facility.

With Third-Party Service Providers

We share information with service providers that help us operate the Service:

  • Stripe — payment processing for operator and guest billing.
  • Twilio — transactional SMS delivery (with your consent).
  • A third-party video hosting and playback provider.
  • A third-party cloud storage provider for screenshots and images.
  • A third-party transactional email delivery provider.

These providers process data on our behalf and are contractually obligated to protect your information.

Google Calendar

A facility may choose to connect a Google account so that ShotReceipt can read reservations that its booking vendor writes to a Google Calendar. Only facility staff with the booking-settings permission can connect an account; guests never connect a Google account to ShotReceipt.

  • Access: We request two read-only Google Calendar permissions: to list the account's calendars so the facility can choose one, and to read events from the chosen calendar. ShotReceipt never creates, modifies, or deletes anything in Google Calendar, and requests no access to other Google services.
  • Use: Calendar data is used for one purpose: resolving the facility's reservations into bay bookings, as described in Section 2. It is visible only to that facility's own staff in the operator portal, like the rest of its booking data.
  • Storage: The OAuth tokens Google issues are stored encrypted at rest and are used solely to read the chosen calendar. Event records are stored with the facility's booking data (see Section 5).
  • Sharing: Calendar data is not sold, is not shared with third parties, is not used for advertising, and is not used to develop, improve, or train artificial intelligence or machine-learning models.
  • Disconnecting: Facility staff can disconnect the Google account at any time from the Booking systems page in the operator portal. Disconnecting deletes the stored tokens and revokes ShotReceipt's access at Google. The account owner can also revoke access at any time from Google's account permissions page.

ShotReceipt's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Via Share Links

Recordings and associated round scorecards may be shared via unique share links. Anyone with a valid share link can view the associated content. Share links may have expiration dates set by the facility.

As Required by Law

We may disclose information if required by law, regulation, legal process, or governmental request.

4. SMS Messaging (ShotReceipt Notifications)

If you provide your phone number and consent to receive text messages, we may send you transactional SMS messages through our "ShotReceipt Notifications" program, including login links, share links, scorecard notifications, and purchase confirmations. Message and data rates may apply.

  • Opt-out: Reply STOP to any message to unsubscribe.
  • Help: Reply HELP for assistance, or contact support@shotreceipt.com.
  • Frequency: Message frequency varies based on your activity. We do not send marketing or promotional text messages.
  • No sharing for marketing: We will not sell, rent, or share your phone number, opt-in consent, or SMS-related data with third parties for their marketing or promotional purposes.
  • Carrier sharing: We may share your phone number with our SMS service provider (Twilio) and mobile carriers or aggregators solely as required to deliver messages and comply with applicable regulations.

5. Data Retention

  • Recordings and Media: Retained according to the facility's subscription plan and applicable retention policies. Guests with active subscriptions may have extended retention.
  • Account Data: Retained for as long as your account is active. Deleted or anonymized upon account deletion, subject to legal retention requirements.
  • Round Data: Retained for as long as the associated facility account is active.
  • Calendar Reservation Data: Retained as booking data for as long as the facility's booking integration exists, and deleted with it. Stored Google OAuth tokens are deleted when the facility disconnects the Google account.

6. Data Security

We implement industry-standard security measures including encrypted connections (TLS), secure authentication (Sanctum tokens, magic links), and access controls (role-based permissions scoped to facilities). However, no method of transmission or storage is 100% secure.

7. Your Rights and Choices

  • Access and Correction: You may access and update your account information through the guest portal or by contacting us.
  • Deletion: You may request deletion of your account and associated data by contacting support@shotreceipt.com. Deletion may be subject to retention obligations.
  • Opt-Out of SMS: Reply STOP to any text message or contact us.
  • Opt-Out of Email: Use the unsubscribe link in any transactional email, or contact us.
  • Disconnect Google Calendar: Facility staff may disconnect a connected Google account from the Booking systems page in the operator portal, which deletes our stored tokens and revokes our access at Google. Access can also be revoked from Google's account permissions page.

8. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website with a revised effective date.

10. Contact Us

If you have questions about this Privacy Policy, contact us at:

Email: support@shotreceipt.com Website: https://shotreceipt.com