Privacy Policy

ChessPlay.io ("ChessPlay", "we", "us") provides software for chess academies to manage classes, students, payments, and progress reports. This Privacy Policy explains what personal data we collect, why we collect it, and what rights you have over it.

• Account data, name, email, phone, academy name, role, and password (stored hashed).
• Student & parent data, provided by academies for the purpose of running their classes (name, contact, attendance, ratings, homework).
• Payment data, handled by our PCI-DSS compliant processors (Stripe, PayPal). We never store full card numbers.
• Usage data, pages viewed, features used, device and browser type, IP address.

We use personal data to:

• Provide, maintain, and improve the ChessPlay platform.
• Process payments and send receipts, invoices, and renewal reminders.
• Send service announcements, security alerts, and (with consent) marketing.
• Detect, prevent, and respond to fraud, abuse, or security incidents.
• Comply with legal obligations.

ChessPlay is used by academies that teach minors. Student records are entered and controlled by the academy (the data controller). ChessPlay acts as a data processor and only processes student data on the academy's instructions. Parents may contact their academy at any time to access, correct, or delete their child's data.

We do not sell personal data. We share data only with:

• Sub-processors that help run the service (hosting, email delivery, analytics, payment processing).
• Authorities when required by law.
• An acquirer in the event of a merger or acquisition (with notice to you).

We keep account and student data for as long as the academy maintains an active subscription, plus a 90-day grace period after cancellation. After that we permanently delete or anonymize the data, unless we are required to retain it for legal reasons (e.g. tax records).

We use industry-standard safeguards: encryption in transit (TLS) and at rest, role-based access control, daily backups, and an incident response plan. No system is 100% secure, but we work hard to keep yours safe.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Email us at support@chessplay.io and we'll respond within 30 days.

Your data may be processed in countries other than your own. When we transfer data outside your region, we use safeguards such as Standard Contractual Clauses to protect it.

We'll update this page when our practices change. Material changes will be notified by email or in-app notice at least 14 days before they take effect.

Questions about privacy? Email support@chessplay.io. See our Terms of Service for the legal agreement governing your use of ChessPlay.