What data we collect
When you use Back9Ops, we collect only what's necessary to run your events and communicate with you:
- Account information: Name, email address, organization (course/league name)
- Event data: Golfer names, email addresses, handicaps, scores, and registration details you enter
- Communication records: Messages sent through the platform
- Usage logs: Pages accessed, features used, and timestamps (for improving the service)
- Technical data: IP address, browser type, and device information
- Location (phone app only): Your precise location while you are using the app, to measure distances on the course. We never track you in the background, we never share it, and you can decline the permission and still use everything else
- Crash reports (phone app only): If the app crashes, the screen you were on and technical details about the failure, so we can fix it
We do not collect credit card data — payments are processed by third-party providers who handle billing separately.
How we use your data
- Service delivery: To manage events, store scores, send pairings, and generate leaderboards
- Communication: To send transactional emails (registration confirmations, event updates, scoring results)
- Support: To answer your questions and help troubleshoot issues
- Service improvement: To understand how the platform is used and fix bugs
- Legal compliance: To comply with laws and protect against fraud or abuse
We will never sell your data or use it for marketing without your permission.
Cookies and similar technologies
Back9Ops uses only the cookies it needs to work. There is no advertising cookie, no analytics tracker, and no third-party marketing cookie anywhere on app.back9ops.com or www.back9ops.com.
- Sign-in cookie: Keeps you signed in to app.back9ops.com. Removed when you sign out
- Security cookie: A short-lived token that protects forms from forgery
- Cloudflare Turnstile: The contact form on www.back9ops.com uses Cloudflare Turnstile to block automated abuse. Cloudflare may set a cookie to do that
- Theme choice: Your light or dark setting is kept in your browser's local storage. It never leaves your device
Because every cookie is strictly necessary, we do not show a cookie banner — blocking them would stop the service from working. You can clear them at any time in your browser settings.
Email and notifications
Back9Ops sends transactional emails only. This means:
- Emails are sent only to users who actively participate in events
- You receive them because you've registered, requested access, or been added to an event by authorized staff
- Emails contain account and event-critical information (verification, registration status, pairings, tee times, scoring, and leaderboard updates)
- We monitor bounces and complaints, and suppress invalid or complaining recipients from future non-essential sends
- You can opt out of non-essential product updates; transactional event/account messages may still be required for service operation
We do not purchase, rent, or scrape email lists, and we do not share your email with third parties for their marketing.
Data sharing
We only share your data with trusted service providers when necessary:
- Hosting: Back9Ops runs on managed servers with encrypted connections and access limited to authorized personnel
- Email delivery (Maileroo): Account and event emails from the platform are delivered through Maileroo
- Payments (Stripe, Square, Clover): Back9Ops subscriptions are billed by Stripe. When you pay a club through Back9Ops (an entry fee, a tee time, league dues), the payment goes to that club's own Stripe, Square, or Clover account — we never see or store your card details
- Push notifications (Google Firebase): Used to deliver notifications to phones that have opted in
- Crash reports (Google Firebase Crashlytics): Receives crash reports from the phone app so we can fix failures
- App stores (Apple, Google): Distribute the phone app and handle its installation
- Course data (GolfCourseApi): Used to look up published course scorecard information
- This website (Amazon Web Services, Cloudflare): www.back9ops.com and its contact form, and protection against automated abuse of our web forms
- Legal compliance: We disclose data only when required by law or to protect our rights
We do not sell, rent, or share your data with marketers, advertisers, or unrelated third parties.
Your rights
You have the right to:
- Access and port: Download a file of the personal data on your account at any time — on the web, under Account › Personal data › Download
- Correct: Update or fix inaccurate information on your profile
- Delete: Delete your account yourself, whenever you like — on the web under Account › Personal data › Delete, or in the app under Profile › Delete account. Your login is removed right away and your name, email, phone, and photo are scrubbed from any shared history (a score you posted stays on its leaderboard as "Deleted Player"). Anything we must keep for legal or financial compliance is removed within 30 days
- Opt out: Unsubscribe from non-essential communications at any time, using the link in any club broadcast or from your notification settings
- Port: Request an export of your data in a portable format
If you would rather we do any of this for you, email sales@back9ops.com and we will handle it within 30 days.
Children
Back9Ops is not directed at children under 13, and we do not knowingly collect personal information from anyone under 13. Golfers aged 13 to 17 may use Back9Ops only with a parent or guardian's agreement, as our Terms of Service explain. A junior rate on a tee sheet is chosen by the adult making the booking. If you believe a child has given us personal information, email sales@back9ops.com and we will delete it.
Data security
We take security seriously:
- Data is encrypted in transit (HTTPS/TLS)
- Passwords are hashed and never stored in plain text
- Access is restricted to authorized staff only
- We conduct regular security reviews and updates
- The database is backed up in full every night, and each backup is checked for completeness before it is stored
- We restore backups onto a separate system to confirm they rebuild correctly
While we implement industry-standard protections, no system is completely immune to attack. We'll notify you immediately if a breach occurs.
Data retention
We keep data as long as you use Back9Ops and for a reasonable period afterward:
- Account data: Kept while your account is active, then deleted upon request or after 2 years of inactivity
- Event records: Kept for historical/reporting purposes, but can be deleted on request
- Usage logs: Kept for 90 days for security and debugging purposes
- Payment records: The amount, the date, whether it went through and the processor's reference — never your card. Kept for 7 years after their last change, even if you delete your account, because the club needs them for taxes and payment disputes. Then deleted
We may retain anonymized data indefinitely for analytics and service improvement.
Third-party links
Back9Ops may link to external websites. We are not responsible for their privacy practices. This Privacy Policy covers only Back9Ops.
Changes to this policy
We may update this Privacy Policy from time to time. We'll notify you of material changes by email or by posting a notice on the Back9Ops homepage. Your continued use of the service means you accept the updated policy.
Questions?
Back9Ops is operated by Back9ops LLC, Lake City, MN 55041. If you have questions about how we handle your data, contact us at sales@back9ops.com.
Last updated: September 29, 2026
