Privacy Policy

We collect only what we need to operate the marketplace. Here's what that means in practice:

• Account information — your email address, username, and profile photo when you create an account.
• Profile information — your shipping address, which you provide to enable shipping rate calculations when you sell.
• Transaction data — details of purchases and sales you make on the platform, including amounts, dates, and shipping information.
• Payment information — we use Stripe to process all payments. Your card details are handled entirely by Stripe and never stored on our servers.
• Communications — messages you send to other users through the platform.
• Usage data — basic analytics about how you interact with the site (pages visited, features used). We do not use third-party advertising trackers.

We use the information we collect to operate the marketplace — nothing more.

• To create and manage your account
• To process purchases and facilitate payments between buyers and sellers
• To calculate and display shipping rates via EasyPost
• To send you notifications about your orders, offers, messages, and disputes
• To detect and prevent fraud and abuse
• To improve the platform and fix bugs
• To comply with legal obligations

We do not sell your personal information. We do not share it with advertisers. Here's who does see it:

• Other users — your username and public listings are visible to all users. Your shipping address is shared with sellers only when you complete a purchase.
• Stripe — processes all payments. Subject to Stripe's Privacy Policy.
• EasyPost — used to calculate shipping rates and generate labels. Receives sender and recipient addresses for this purpose.
• Supabase — our database and authentication provider. Data is stored on Supabase infrastructure.
• Law enforcement — if required by a valid legal process, such as a court order or subpoena.

We keep your data for as long as your account is active. If you delete your account, we delete your personal information within 30 days, except where we're required to retain it for legal or financial compliance purposes (such as transaction records, which we retain for 7 years as required by US tax law).

Transaction records are anonymized after the retention period — your name and contact details are removed while the financial record is preserved.

We use cookies to keep you logged in and to remember your preferences. We do not use third-party advertising cookies or cross-site tracking.

We use basic analytics to understand how the platform is being used — things like which pages are visited and where errors occur. This data is aggregated and not tied to individual identities.

We take security seriously. All data is encrypted in transit (HTTPS) and at rest. Payment processing is handled entirely by Stripe — we never see or store your card number, CVV, or bank details.

Every transaction on the platform is monitored for signs of fraud and abuse. Suspicious activity is flagged and reviewed by our team. We take action on confirmed violations, including permanent account removal.

That said, no system is perfectly secure. If you become aware of a security issue, please contact us immediately at admin@toolsof.golf.

You have the right to access, correct, or delete your personal information at any time. You can:

• Update your profile information in your account settings
• Delete your account from the Danger Zone section of your settings — this removes all personal data within 30 days
• Request a copy of your data by emailing admin@toolsof.golf
• Opt out of non-essential communications by updating your notification preferences

Tools of Golf is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has created an account, we will delete it.

We may update this policy from time to time. When we make material changes, we'll notify you via email or a notice on the platform at least 14 days before the changes take effect.

Continued use of the platform after changes take effect constitutes acceptance of the updated policy.