Privacy Policy

Club Builder (“the App”, “we”, “us”, or “our”) is a Shopify application that enables golf retailers to offer custom club configuration and dynamic pricing to their customers. This Privacy Policy explains what data we collect, how we use it, and your rights in relation to that data.

By installing or using Club Builder, you (“the Merchant”) agree to the terms of this Privacy Policy. If you do not agree, please uninstall the app.

2.1 Merchant Data

When you install Club Builder, we collect:

• Your Shopify store domain (e.g. yourstore.myshopify.com)
• An OAuth access token to communicate with your store's Shopify Admin API
• Product and variant IDs for products you link to the Club Builder system

2.2 Customer Configuration Data

When a customer uses the Club Builder widget on your storefront, we store:

• The product configuration they built (selected clubs, shaft, grip, specifications)
• The calculated price for that configuration
• A unique configuration ID used to link the cart item to the configuration record

We do not collect customer names, email addresses, payment information, or any personally identifiable information (PII) as part of the configuration process.

2.3 Cart & Order Data

Cart line item attributes (such as configuration ID, selected options, and price breakdown) are passed to Shopify as standard cart properties. We do not store order data independently — all order information remains within your Shopify store.

We use the data we collect solely to:

• Operate and deliver the Club Builder service to your store
• Apply correct custom pricing to cart items via Shopify's Cart Transform API
• Allow merchants to manage product configurations through the admin dashboard
• Troubleshoot errors and improve the reliability of the service

We do not sell, rent, or share your data or your customers' data with any third parties for marketing or advertising purposes.

Configuration data is stored in a secure database hosted on Supabase, a SOC 2 Type II certified cloud database provider. Access is restricted by row-level security policies. OAuth tokens are encrypted at rest using industry-standard encryption.

All data is transmitted over HTTPS/TLS. We do not store unencrypted credentials or payment information at any point.

Configuration records are retained for as long as your store has Club Builder installed. Upon uninstalling the app, you may request deletion of all associated data by contacting us at the support address below. We will process deletion requests within 30 days.

Club Builder integrates with the following third-party services:

• Shopify — cart, product, and order data via the Shopify Admin and Storefront APIs
• Supabase — secure database hosting for configuration records

Each of these services has their own privacy policy and data handling practices. We encourage you to review them independently.

As a merchant or end user, you have the right to:

• Request access to the data we hold about your store
• Request correction of inaccurate data
• Request deletion of your data upon uninstalling the app
• Object to processing in certain circumstances

To exercise any of these rights, please contact us via the support page.

For merchants operating in the European Economic Area (EEA) or serving EEA customers, we act as a data processor on your behalf. We process data only as instructed by your use of the app and in accordance with Shopify's data processing agreements.

We may update this Privacy Policy from time to time. We will notify merchants of significant changes by updating the “Last updated” date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy or how we handle your data, please contact us: