Privacy

ChesSync provides software that chess academies use to manage their students. Each academy decides what it records about its students and families; we process that information on the academy’s behalf.

What we store

• Academy details: name, logo, payment links and settings.
• Accounts: names, email addresses and optional phone numbers of academy admins and families. Passwords are stored only as salted, one-way hashes.
• Student records added by the academy: name, optional date of birth, batch, level, coach name, fee periods, assessments, feedback and tasks.
• Chess data: public Chess.com and Lichess usernames and the public ratings and activity we sync for them.
• Learning activity: puzzles solved, tasks and lessons completed, used for streaks and reports.
• Sign-ups: the academy name, owner’s name, email, phone and country from the sign-up form, and when the owner agreed to our terms and confirmed parents’ permission (see below). Each email and phone gets one free plan and one free trial, so we keep the email and phone of confirmed sign-ups even after an academy is deleted; unconfirmed sign-ups are removed after 7 days.
• Payments academies make to us: invoices, and for UPI payments the transaction number and any screenshot attached.
• Feedback from academy owners: their 0 to 10 answer to “how likely are you to recommend us?” and any comment. If they email us a review or a video, we show it on our website only with the permission they give in that email, and take it down if they ask.
• Website visitors who ask for a free tool’s result by email: their email address, after they confirm it, so we can send the result and occasional tips. Every email has an unsubscribe link.

What we don’t do

• We don’t sell personal data or use it for advertising.
• We don’t collect or hold fee payments — families pay academies directly.
• We never ask for Chess.com or Lichess passwords.

Children’s data

Most students are children. The academy adds their details, so the academy asks their parents or guardians for permission first; every academy confirms this when it signs up, and we keep a record of when. Parents can ask their academy, or us, to see, correct or delete their child’s details.

Who processes it for us

We use a small number of providers, each only for its job, and none may use the data for anything else:

• Google Cloud (Singapore): runs the application and stores uploaded files and backups.
• Neon (Singapore): the database.
• Cloudflare: hosts the website and the web app, and counts page views.
• Resend: sends emails.
• MSG91, with Meta’s WhatsApp, when an academy switches WhatsApp on: sends WhatsApp messages.

Chess.com and Lichess are only read from: we fetch the public ratings and games of the usernames an academy adds.

Separation between academies

Each academy’s data is isolated within our database. Academy staff see only their own academy; families see only their own children.

Deletion

When an academy deletes a student, the student’s profile, progress, activity, chess connections and fee records are removed from the live application immediately. An academy that stays unpaid is closed and then deleted with all its data. Copies may remain in encrypted backups until those expire, within 30 days.

To ask for your data, a correction or deletion, write to your academy or to us at the address below. We answer within 30 days. Invoices are tax records, so we keep them as the law requires, without the academy’s student data.

Website

Our website sets no cookies and shows no ads. It uses Cloudflare Web Analytics (when enabled) to count page views, and our own counters, which keep only a day, a campaign tag from the link you came by and a number: no IP address, no identifier. If you arrive through a link with a campaign tag or a referral code, we keep it in your browser’s own storage (not a cookie) for 30 days and send it with your sign-up if you sign up, so we know which link brought you. Enquiry forms send your details only to our team so we can reply.

Contact

Questions or requests: [email protected].