Privacy Policy

This explains what botconfirmed collects, why, who else handles it, and what happens when you delete your account. It covers our website, the app, the iOS app and the waitlist form on botconfirmed.com. We do not sell your personal information and we do not run ads.

What we collect

• Your account: email, name, and either a password (stored only as a one-way hash) or the ID from Google or Apple if you sign in that way. We also keep when you last signed in, your notification settings, and how you found us (the page you landed on, any campaign tags in the link, and what you tell us on the signup form).
• Your club login: the member number or email and the password you give us for your club's booking site. They are encrypted before they are stored. The app never shows a saved password back. Our software decrypts it only to sign in to your club's site: to check your login, set up your club, run your bots, and check overnight that the club's site still works.
• Your bots and bookings: the clubs, dates, time windows and options you set, and a record of every run, including what was booked, when, and what happened when it was not.
• Pages from your club's site: to set up a club and to run your bots, our software signs in as you and reads the club's pages. We keep a screenshot of the club's own booking page as proof of each booking. These can show your name, your member number, and sometimes other members' names on a tee sheet. On test runs, a club's first runs, and the run after a failure, we also keep a fuller record of the session: step-by-step screenshots and the network traffic between our browser and your club's site. That traffic record can include what was sent to the site when signing in.
• Billing: your name and email go to Stripe, which holds your card and payment history. We store your Stripe customer and subscription IDs, your plan and its status, and a record of each booking fee (see below). We never see or store your card number.
• Messages: copies of the emails we send you, and anything you send to support@botconfirmed.com. If you use the feedback button we keep your message, the page you were on, your browser type, and a screenshot if you add one.
• The iOS app: a push notification token for your device, and the app version.
• Security and account records: for some account actions, such as deleting an account, we keep a note of what was done and the IP address it came from.
• The waitlist on botconfirmed.com: your name, email, course name, course website and booking system if you tell us.

How we use it

To run your bots and book your tee times, to email or notify you about bookings and problems, to bill you, to answer support, and to find and fix what breaks. We do not use your data for advertising, and we do not track you across other sites.

Who else handles your data

• Render hosts the app and the database where your account, bots and run records live.
• Cloudflare serves our website traffic, hosts the waitlist site and its database, routes mail sent to support@botconfirmed.com to us, and stores proof screenshots and run records in file storage. Only our app reads those files.
• Stripe processes payments and holds your card details, invoices and billing history.
• Resend sends our email, including the waitlist confirmation.
• Anthropic (Claude) does the AI work described below.
• PostHog does the analytics described below.
• Google, if you use it to sign in, and because our support inbox forwards to a Gmail account. Apple, if you use it to sign in, and to deliver push notifications to the iOS app.
• Your club. When our software books for you, the club sees a booking made from your own account, the same as if you had done it yourself.

We also share information if the law requires it.

AI

We use Anthropic's Claude in three places.

• Setting up a club. Claude works a browser signed in as you to learn how your club books tee times. It reads the club's pages as text and screenshots, which can include your name, your member number and tee sheet entries. We replace your password with a placeholder before anything is passed to Claude, so it does not see your password in what we send.
• Working out why a run failed. Claude reads a trimmed record of that run: our steps, what the club's site sent back, request details and screenshots. We remove your club login from that record before it is passed to Claude, along with passwords, tokens and session values in the requests and replies.
• Support. When you send feedback or write to support, Claude reads your message, your name, and facts about your bot and plan (names, schedule, settings, recent run results) to draft a reply for us. A person sends the reply.

Analytics

We use PostHog, hosted in the United States, for product analytics and session replay on our website and inside the app. It records page views, clicks, and what you do in the app so we can see where it gets in your way. Session replays mask your club login, your email and anything you type into the feedback box before they leave your browser; other fields, such as your club's sign-in address and your schedule, are recorded so we can see where setup goes wrong. Booking screenshots are never recorded. We do not record the admin side of the app.

When you are signed in, PostHog knows you by your account ID, with your email, plan and billing status attached. Our servers also send it events such as account created, bot created, run started, booking confirmed, run failed with a failure category, plan started and feedback sent. Those carry club and bot names. We never send it passwords, club usernames or the text of your feedback. Replays are kept for 30 days and other analytics data for up to a year.

PostHog sets a first-party cookie and browser storage on botconfirmed.com so a visit to our site can be joined to the account you later create. We also use a cookie that keeps you signed in, short-lived cookies while you sign in with Google or Apple, and browser storage for your theme choice and where you signed up from. We use no advertising cookies. To opt out of analytics and session replay for your account, email support@botconfirmed.comand we will turn it off for both the browser and our servers.

How long we keep things

We keep your account, bots, run history, proof screenshots and run records until you delete the bot or your account. We have not set an automatic deletion schedule for them.

Deleting your account

You can delete your account yourself from Account, or email support@botconfirmed.com. Deleting removes your account, your bots, your saved club logins, your run history, your screenshots and run records, your notification history and your registered devices. If you have a plan, it is cancelled and any booking fees not yet billed go on a final invoice.

Some things stay after you delete:

• A record of each booking fee we charged: your email, bot name, club name, plan, the date and time of the tee time, and the fee and when it was charged or credited. We keep it for our accounting and tax records and to settle disputes. It is not deleted on a schedule.
• Stripe keeps your customer record and invoices under its own rules and legal duties.
• A one-way hash of your email, the date your trial started and your Stripe customer ID, so a deleted account cannot get a second free trial.
• The emails we sent you, any messages and feedback you sent us, and a record that your account was deleted. These are kept in our own logs and still show your email address.
• Analytics already sent to PostHog stays there until PostHog's retention period ends. Email us if you want it removed sooner.

Tee times we already booked stay on your club's tee sheet. Manage or cancel them with the club.

Your choices

You can ask us to show you what we hold about you, correct it, or delete it. Email support@botconfirmed.com. You can update or remove a club login in your bot's settings, and manage email notifications in your account.

Security

Club logins are encrypted, and account passwords are stored as one-way hashes. No system is perfectly secure, and we cannot promise that yours will never be exposed. If we learn of a breach that affects you, we will tell you.

Children

botconfirmed is for adults. We do not knowingly collect information from children.

Changes

We update this page when what we do changes and change the date at the top. If a change affects how we use your data in a way that matters, we will email you.

Contact

support@botconfirmed.com. The Terms of Service cover the rest.