Privacy Policy

1. Introduction

This Privacy Policy explains how Chess67 LLC, a Georgia limited liability company (“Chess67,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information when you use Chess67.com and related services.

By accessing or using Chess67, you acknowledge that you have read and understood this Privacy Policy.

2. Data We Collect

We collect information necessary to operate, improve, and secure our platform, including:

• Identity Data: name, username, date of birth
• Contact Data: email address, telephone number
• Financial Data: payment-related information processed through third-party payment processors (we do not store full payment card details)
• Transaction Data: purchases, payouts, refunds, and related records
• Technical Data: IP address, browser type and version, device information, time zone, and operating system
• Profile Data: preferences, feedback, survey responses, and account settings
• Usage Data: interactions with the website, features used, and activity logs
• Communications Data: messages and communications sent through the platform

Communications data may be accessed by Chess67 staff for troubleshooting, investigating reported violations, fraud prevention, and maintaining platform safety.

3. Children’s Privacy

Chess67 provides tools for parents and legal guardians to create and manage accounts for children. You must be at least 18 years old to make purchases on the platform.

If you create an account for a child, you represent and warrant that you are the child’s parent or legal guardian and that you consent to the collection and use of the child’s information as described in this Privacy Policy.

We do not knowingly collect personal data from children without parental consent. If we determine that an account has been created for a child without proper authorization, we may suspend or terminate the account and delete associated data.

Parents or guardians may request access to, correction of, or deletion of a child’s personal data by contacting us.

4. How We Use Your Data

We use personal data for the following purposes:

• To create and manage user accounts
• To process payments, fees, and transactions
• To provide customer support and communicate with users
• To enforce our Terms of Service and community guidelines
• To detect and prevent fraud, scams, abuse, and security incidents
• To operate, maintain, and improve the platform
• To comply with legal and regulatory obligations

We process personal data based on contractual necessity, legitimate business interests, user consent where required, and legal obligations.

5. Data Sharing and Third Parties

We may share personal data with trusted third parties only as necessary to operate the platform, including:

• Payment processors (such as Stripe) to process transactions
• Hosting and infrastructure providers to operate the website
• Email and communications providers to deliver notifications and support messages
• Background screening providers (such as Checkr) when coaches explicitly start optional background verification
• Analytics and security services to monitor performance and prevent abuse
• Legal or regulatory authorities when required by law or to protect our rights

Subprocessors

We use the following third-party service providers (subprocessors) to process data on our behalf:

• Supabase: Database, authentication, and backend services
• Stripe: Payment processing
• Checkr: Optional coach background screening and verification workflows
• Vercel: Web hosting and infrastructure
• Discord: System alerts and notifications

We do NOT sell any user data to third parties.

6. Coaches and Google User Data

Coaches on Chess67 may choose to connect their Google accounts to facilitate scheduling. When a coach connects their Google account, we access the following data via Google OAuth scopes:

Connecting a Google account is optional.

• Google Calendar: Used to check for busy slots in the coach's calendar to prevent conflicts, and to automatically add booked lessons to the coach's calendar. We do not store details of your other personal events.
• When you connect your Google Calendar, we read busy and free time information to check for conflicts, and we create calendar events only for lessons and sessions booked through Chess67. We store only the data needed to link those Chess67 bookings to your calendar events, such as the event ID and scheduled time.
• Google Profile and Email: Used to identify the account being connected and provide a seamless integration experience.

Purpose: This data is used exclusively to show accurate availability to students and prevent scheduling conflicts.

Google user data obtained through these integrations is not used for advertising and is not shared with third parties except as necessary to provide the Chess67 services as described in this policy.

User Controls: You can disconnect your Google account at any time from your Chess67 coach settings. You can also revoke Chess67’s access to your Google data at any time through your Google Account permissions page.

Google API Services User Data Policy Compliance

Chess67’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7. Account Suspension and Deletion

Suspension

Chess67 may suspend or terminate accounts that violate our Terms of Service, including fraud, harassment, hate speech, or other prohibited conduct. Data associated with suspended accounts may be retained as necessary for enforcement, dispute resolution, or legal compliance.

Deletion

You may request the deletion of your personal data by either deleting your account through your account settings or by emailing us directly at hello@chess67.com. Upon receiving a deletion request and verifying your identity, your personal data will be removed from active systems, subject to retention requirements for legal, accounting, or security purposes.

8. Data Retention

We retain personal data only for the length of time consistent with our business purposes and to fulfill the purposes outlined in this policy, including to provide services, comply with legal and financial obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on the type of data and applicable requirements.

9. Data Security

We implement robust administrative, technical, and organizational security measures designed to protect your personal data, including:

• Encryption in Transit: All data transmitted between your browser and our servers is protected using HTTPS/TLS encryption.
• Encryption at Rest: Sensitive data stored in our databases is encrypted at rest.
• Access Controls: We restrict access to personal data to authorized personnel who need it to perform their jobs.
• Security Reviews: We perform regular reviews of our security configurations and practices to ensure the ongoing safety of our systems.

However, despite our best efforts, no security system is impenetrable, and we cannot guarantee the absolute security of your information.

10. Your Rights

Depending on your location, you may have rights to access, correct, or delete your personal data, or to object to certain processing activities. Requests can be made by contacting us using the information below.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Continued use of Chess67 after changes become effective constitutes acceptance of the updated policy.

12. Contact Us

This Privacy Policy is provided by Chess67 LLC, a Georgia limited liability company.

If you have questions about this Privacy Policy or our data practices, contact us at: