Operator Privacy Policy

Effective date: October 28, 2026

This policy is for the people who run a driving range. It covers Manage My Range, our app for range operators, and the web dashboard at app.mapmyrange.com. It is the whole privacy policy for those products — you do not need to read another one alongside it.

If you are a golfer, this is the wrong page. The golfer app, Map My Range, is covered by our Privacy Policy. The two products collect different things from different people, and keeping one document for each is how we avoid describing your data in language written about somebody’s golf swing.

1. Who we are

Windegrated Solutions, LLC (“we”, “us”) operates MapMyRange. We make two mobile apps and a web dashboard:

Manage My Range is the operator app, and this policy covers it. It is what the staff of a driving range use to set the range up and run it — mapping targets, setting opening hours, publishing closures, holidays and events, and managing who on the team can do what.
The web dashboard at app.mapmyrange.com does the same work in a browser, and this policy covers it too.
Map My Range is the separate app golfers use. It is covered by the Privacy Policy, not by this one.

For any privacy question or request, email privacy@mapmyrange.com. For anything to do with an account, including having one removed, email support@mapmyrange.com.

2. What we collect from you

This is the complete list for the operator app and dashboard. Everything here is collected to make the product work — none of it for advertising, tracking, or resale.

Your email address. Used to sign you in. Authentication is handled by Clerk on our behalf, and we never store your password — they do. Operator access is not self-serve: you are invited by your organization, so the address we hold for you is the one your organization used to invite you.
An account identifier. A unique ID for your account, carried on every request you make so we can tell what you are allowed to do. It is also recorded against the changes you make to your range, so an organization can see who set its hours or moved a target.
When you last used your account. When you use the app or the dashboard, we note the time on your account, updating it at most once every fifteen minutes. Our staff use it to see which operator accounts are still in use when reviewing who has access. It is a single timestamp, not a record of what you did.
Your organization’s phone number. When a range is set up, we collect a contact phone number for the organization. We treat it as personal data even though it is meant as a business line: at a small range it is often somebody’s own mobile, and nothing in a phone number tells us which it is.
Your organization’s postal address, and each range’s. The street address, town or city, state or region, postcode and country of the organization, and the same for each of its ranges. We use it to show golfers where the range is. You type it in; we do not read it from a device, and we do not turn it into map coordinates: where a range sits on the map is the hitting area you draw. In the web dashboard, what you type into a range’s address is sent to Mapbox to suggest how to complete it — see section 6.
Positions you record by standing at them. Precise location, in two specific circumstances, each one something you choose to do: at a target, or at a spot you measure targets from. This one has its own section below because it is easy to misread.
What you write about your facility. The names you give your organization, your ranges and your targets; your opening hours and any note beside them; your closures, holidays and events, with their descriptions; the description and website of each range; and the labels you put on wind sensors. Golfers see most of this in the golfer app, which is the point of it.
The email address of anyone you invite. When you invite a colleague, we keep a one-way cryptographic hash of their address — not the address itself — so that when they accept we can match the invitation to the right person. Their own account data is then covered by this policy in the same way yours is.
Crash, performance and diagnostic data. We use Sentry to collect crash reports, error diagnostics, performance traces and breadcrumbs, so we can find out why something broke. As of the effective date above, Sentry may also record the IP address associated with a diagnostic event. We are removing IP capture in an upcoming release; it is used only for debugging and never for advertising.

3. Positions you record by standing at them

Placing a target, or setting the downrange point a range is aimed at, can be done by tapping the spot on a map, or by walking to it and recording where you are standing. A target can also be placed with Surveyor: you stay on the tee line, stand at one spot or two, and measure the target with a laser instead of walking to it.

If you tap it on a map, what we store is a point you drew. Nothing about where you were is involved.

If you record it by walking to it, what we save is your device’s own precise position at that moment. It is saved against the range, and it is attributable to the account that saved it. What it describes is a piece of range equipment — a flag, a net, a bunker — but it is a person’s position all the same, and that is why we declare it as precise location rather than as a map coordinate. We would rather say this plainly than let it sit unmentioned behind the word “target”.

If you place it with Surveyor, what we save includes each spot you stood at to measure it: its position, from a GNSS receiver, from your device, or typed in by you, and the time you set it. We keep it with the laser’s readings and the laser’s model and serial number, so that how the target got its position can be checked, or worked out again, later. A spot you stood at describes no equipment at all. It is where a person was and nothing else, and it is declared as precise location for the same reason.

A target keeps the history of every position it has been given, not only its latest, each with the account that recorded it and how it was measured. Your organization’s staff who can edit the range’s targets can see that history, and so can our support staff. Golfers never see who placed a target.

Recording a position is always something you choose to do. The app never reads your location in the background, and we ask for location permission only while the app is open and in the foreground. It saves only the positions you choose to record, never the path you walked between them, so it does not follow you around the range. If you never record a position by standing at it, and never type in where you stood, we never collect your location at all.

4. What this app does not collect

We tell you this because the golfer app collects several things this one does not, and an operator reading a shared policy could reasonably assume the worst:

No date of birth. Manage My Range has no onboarding flow and never asks for one.
No name. Signing in transmits your email address and password only. There is no sign-up screen, no social sign-in, and no profile editor. Where you see a name in the app, it came back from our server — receiving a name is not collecting one. Every name this app sends is the name of a facility.
No device identifier. There is no push token and no advertising identifier. The app does not read your device’s ID by any route.
No record of what you tap. There is no product-analytics SDK and no behavioural event stream in the operator app.

5. What we do not do

We do not use any third-party advertising or tracking SDKs.
We do not use the Advertising Identifier (IDFA), and we do not show an App Tracking Transparency prompt, because we do not track you across other apps or websites.
We do not sell your personal data, and we do not share it for cross-context behavioural advertising.
We do not use your data, or your range’s, to train advertising or profiling models.

We share personal data only in the ways this section describes.

Service providers. These providers process personal data on our behalf, to make the product work:

Clerk — authentication and account management for operators (email address, account ID).
Amazon Web Services — hosting for our servers and database, and delivery of the email we send you, including invitations (SES).
Sentry — crash reporting, error diagnostics and performance monitoring.
Mapbox — the map in the web dashboard, and the suggestions it offers when you search that map or type a range’s address there. What you type is sent as you typed it, with no device location. We keep the address you confirm, and nothing Mapbox sends back. The Manage My Range app sends nothing to Mapbox.
Vercel — hosting the web dashboard and delivering it to your browser.

Apple Maps and Google Maps, in the app. On iPhone, the maps in Manage My Range are Apple Maps, which are part of iOS. On Android, they are drawn by Google Maps, and Google’s mapping software inside the app sends Google, directly from your device: your IP address; an identifier the software creates for itself; your device’s make, model and operating system; crash reports from the map; the part of the map being shown, which at a range is roughly where you are; and, when you move or zoom a map, those movements. When you search a map for an address or a place, what you type goes to Apple on iPhone, or to Google on Android, which find it for the app; we do not receive the search or keep its answer. Apple and Google do all of this under their own terms and privacy policies rather than on our behalf: see the Apple Privacy Policy and the Google Privacy Policy. We do not send either of them your account, or anything you record about your range.

Legal requirements and safety. We may disclose personal data if we believe in good faith that the law, a regulation, a subpoena, a court order or other legal process, or a lawful request from a public authority requires it; or that disclosure is necessary to enforce our Operator Terms of Service, or to protect the rights, property or safety of Windegrated Solutions, LLC, our users, golfers, or others, including to detect and prevent fraud, abuse and security problems. Where the law allows it and it is practical, we will tell you before we disclose your personal data in response to legal process.

Business transfers. If Windegrated Solutions, LLC is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of its assets, personal data may be transferred as part of that transaction. Whoever receives it will be bound by this policy for the data transferred, unless you are given notice of a change and the chance to have your account closed and your personal data erased before the change takes effect.

We do not sell your data to, or share it with, advertisers or data brokers.

7. What you can see about golfers

Manage My Range shows you nothing about individual golfers. The app covers your facility — hours, closures, targets, events, team. There is no reporting or outreach screen in it.

The web dashboard is different, and this is the part worth reading carefully. On the Pro tier it includes outreach, and outreach works on individuals rather than on totals:

Golfers appear to you as aliases, never as names. You are shown practice signals beside each alias — how recently they visited, how often, and whether they appear to be in a slump — and you choose which aliases to include in a campaign. That is a per-person view of pseudonymous people, and we would rather describe it that way than call it “aggregate”, which it is not.
You never see a golfer’s name, email address, phone number, or any other contact detail, and you never see their shot history. We deliver the message; the address never reaches you.
Some figures genuinely are aggregate — an opt-in rate across your audience, for example — and those are totals with nobody identifiable in them.
You write the words, and nothing sends itself. A campaign goes out because you started it.
Consent, frequency caps and quiet hours apply to every send, and message copy may not quote a golfer’s hit rate, percentile, or standing against other players.

Because you are choosing which people receive a message, you and we are making that decision together. Section 8 sets out who is responsible for what when that happens.

What golfers see of you is the facility information in section 2: your range’s name, where it is, when it is open, what is on there, and where its targets are.

8. Who is responsible for what

Data protection law asks who decides why personal data is processed and how. The answer is not the same for everything here, so this section gives it in full rather than in the abstract.

Your own data as an operator — we are the controller. Your email address, your account identifier, the positions you capture and the diagnostic data in section 2 are collected because we decided to collect them, for the purposes stated there. Windegrated Solutions, LLC is the data controller for all of it, and the providers in section 6 process it on our instructions. Your rights over that data run against us, by the route in section 11.

Your organization’s records — the organization’s content, our platform. Your range’s name, address, hours, closures, targets and events belong to the organization. We process them to run the service and to publish them to golfers, which is the thing the organization signed up for. Most of it is not personal data at all; where it carries a person — the account that made a change — we are the controller for that in the way described above.

Golfer data — we are the controller, and you are not given it. Everything a golfer records in Map My Range is collected by us, under the golfer Privacy Policy, on the basis we agreed with them. You never receive a golfer’s name, email address or contact details, and you never see their shot history. Nothing here makes your organization a processor of golfer data, because you are never given golfer data to process.

Outreach — we decide it together, and this is the split. When your range starts a campaign, you choose which pseudonymous golfers it goes to and you write what it says. We decide how an audience is resolved, how a message is delivered, which consents and caps apply, and we alone hold the identities behind the aliases. Under the UK and EU GDPR that makes us joint controllers for that processing, and Article 26 requires us to tell you who does what:

We handle everything facing the golfer: transparency, consent, frequency caps, quiet hours, the ability to opt out, and every request a golfer makes to see, correct or delete their data. That is not a courtesy — you could not answer a golfer who contacted you, because you do not know who they are.
You are responsible for what your message says — that it is lawful, accurate, not misleading, and that any offer in it is one your range will honour. The copy rules in section 7 are ours and we enforce them, but the words are yours.
We are the contact point for golfers, at privacy@mapmyrange.com. A golfer may exercise their rights against either of us; if one approaches you, send them to us and tell us it happened.
We notify the regulator and the affected golfers of a personal-data breach involving outreach data, because we are the ones holding it.

The binding form of that split is in the Operator Terms of Service, which is the agreement between us. This section is its essence, which Article 26 requires be made available to you here. Until your range uses outreach, none of this paragraph applies to you — outreach is a paid capability and nothing sends itself.

Neither of us is the other’s processor. No part of this arrangement has your organization processing personal data on our instructions, or us on yours, so neither of us owes the other a processing agreement under Article 28. The processors we do use are the ones named in section 6.

9. Your account belongs to your organization

An operator account is not one you created for yourself. Your organization’s administrator grants your access, decides what you can do, and can take that access away at any time. That is why Manage My Range has no Delete Account screen — there is no self-serve account to delete, because there was no self-serve account to create.

To have your access removed, ask your organization’s administrator.
To have the account itself closed, email support@mapmyrange.com and we will do it.
To have your personal data erased as well, say so in the same email, or write to privacy@mapmyrange.com.

Closing the account and erasing your personal data are different, and section 10 says what each one does. Our Delete Your Account page sets out the route in full.

10. How long we keep it

We keep your personal data for as long as your account is open. After that, what we keep depends on what was asked for, because your name is on records that belong to your organization, and closing an account is not the same request as erasing a person.

When an operator account is closed — because you asked us to close it, or because your sign-in was deleted at Clerk — you can no longer sign in, and every membership and permission you held is removed at once. Your name and email address stay on the closed account, so the records you wrote for your range still say who wrote them: who added a closure, who moved a target, who invited a colleague. We keep them for that and for nothing else. A closed account can be reopened if it was closed by mistake, but its memberships are not given back: your organization would have to add you again.
When you ask us to erase your personal data, we remove your name, your email address and the time you last used your account, take your account off the positions you recorded for your range’s targets, and delete your sign-in at Clerk, within 30 days of the request. The account’s identifier stays on everything else you wrote, so those records show a former operator rather than a gap in your range’s history, and nothing in them names you any more. The positions stay with the targets, because they are how each target got where it is, but they no longer point at your account. An account is closed before it is erased, so erasing it also removes your access.

Data we delete can remain for a short time in the encrypted backups we keep to recover from failures. Every backup expires within 30 days of the deletion, so the 30 days above include them.

Two things outlive both, and we would rather say so than let the promise be true by luck:

Your range’s own records stay. Its name, address, hours, closures, targets and events belong to the organization, not to you, and they do not disappear because one member of staff left.
The account’s identifier stays, together with the one Clerk gave us — opaque strings, never your email address or anything you typed. A sign-in still held on a device then finds a closed account and is refused, rather than silently opening a new one. They are kept for as long as we run the service, and they are never used to identify you, to contact you, or to rebuild anything.

Invitations expire: an unaccepted invitation, and the hashed address behind it, is removed when it is revoked or consumed.

If you are in the European Economic Area, the United Kingdom or Switzerland, you have the following rights over your personal data:

Right to Access — obtain a copy of the personal data we hold about you.
Right to Rectification — have inaccurate personal data about you corrected.
Right to Erasure — ask us to delete your personal data.
Right to Portability — receive your data in a structured, machine-readable format.
Right to Object — object to or restrict certain processing of your data.
Right to Withdraw Consent — where we rely on your consent, withdraw it at any time, without affecting what we did with it before you withdrew it.
Right to Complain — lodge a complaint with your local data protection authority.

Our legal bases. We process your personal data because it is in our legitimate interests, and your organization’s, balanced against your rights: to provide the Operator Service your organization signed up for, to keep it secure, to record who changed a range’s records, to review who still has access, and to diagnose faults and improve the product. We rely on your consent for your device’s location, when you record a position by standing at it, at a target or at a spot you measure targets from, and we process personal data where the law requires us to.

International transfers. We are based in the United States, and our service providers process data mainly in the United States. If you use the Operator Service from outside the United States, your personal data is transferred to, and stored and processed in, the United States. Where the law requires it, we rely on appropriate safeguards for those transfers, such as the European Commission’s Standard Contractual Clauses.

Note that these rights are yours over your own personal data — your email address, your account ID, the positions you recorded. They are not a route to your organization’s business records, which belong to the organization. To exercise any of these rights, email privacy@mapmyrange.com.

12. Your rights under the CCPA (California)

If you are a California resident:

Right to Know — what personal information we collect and how we use it, which is described in this policy.
Right to Delete — request deletion of the personal information we hold about you.
Right to Correct — request correction of inaccurate personal information we hold about you.
Right to Opt-Out of Sale — we do not sell your personal information, so there is nothing to opt out of; we honour this right by default.

You may make a request yourself or through an authorized agent. We verify each request, and an agent’s authority, before acting on it. We will not discriminate against you for exercising any of these rights. To make a request, email privacy@mapmyrange.com.

13. Security

We protect personal data with encryption in transit (HTTPS/TLS) and at rest. Beyond encrypting our database and its backups as a whole, we separately encrypt your email address, field by field. We never store your password; Clerk does. Access to our production systems is limited to the people who need it. No method of transmitting or storing data is completely secure, so we cannot guarantee absolute security. If a breach affects your personal data, we will notify you and the relevant authorities as the law requires.

14. Children

Manage My Range is a tool for the staff of a business. It is not directed to children, it is not offered to them, and access to it is granted only by an organization to its own people.

15. Changes to this policy

We may update this policy from time to time. When we do, we will revise the effective date at the top of this page. Material changes will be communicated in the app or by email where appropriate.

16. Contact us

Questions about this policy or your data? Email privacy@mapmyrange.com. For anything to do with an account, including having one removed, email support@mapmyrange.com.

Windegrated Solutions, LLC