Privacy Policy

1. Information We Collect

Personal Information

When you create an account, we collect:

• Email Address: Required for account registration and communication

Chess Game Data

When you use our Service, we collect and store:

• Chess Games: PGN files and game data you upload or input
• Game Analysis: Chess game reviews and analysis results
• AI Explanations: AI-generated move explanations you request

Usage Information

We automatically collect certain information through:

• Vercel Analytics: Anonymous usage statistics to understand how our Service is used and improve user experience
• Service Usage: Information about your use of features, such as AI explanation requests and subscription status

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain our chess analysis services
• Create and manage your user account
• Process your chess games and provide analysis results
• Generate AI-powered move explanations through OpenAI's services
• Process subscription payments through Stripe
• Send important service-related communications
• Improve our Service through anonymous usage analytics
• Enforce our Terms of Service and protect against misuse

3. Information Sharing and Disclosure

We may share your information in the following circumstances:

Third-Party Service Providers

• OpenAI: Chess game data (without personal information) is sent to OpenAI to generate move explanations. This data is subject to OpenAI's privacy policy and usage terms.
• Stripe: Payment information for Pro subscriptions is processed by Stripe. We do not store your payment details.
• Supabase: User authentication and data storage services.
• Vercel: Hosting and anonymous analytics services.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

Business Transfers

If ChessArc is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.

4. Data Retention

We retain your information as follows:

• Account Information: Retained indefinitely while your account is active
• Chess Games and Analysis: Stored indefinitely to provide game history features
• AI Explanations: Stored indefinitely for your reference and service improvement
• Usage Analytics: Anonymous data retained for service improvement purposes

You may request deletion of your data at any time by contacting us at chessarcapp@gmail.com.

5. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

General Rights

• Access: Request information about the personal data we hold about you
• Correction: Request correction of inaccurate personal information
• Deletion: Request deletion of your personal information and associated data
• Data Portability: Request a copy of your data in a portable format

EU Residents (GDPR Rights)

If you are in the European Union, you have additional rights under GDPR:

• Legal Basis: We process your data based on legitimate interests (service provision) and consent (account creation)
• Objection: Right to object to processing based on legitimate interests
• Restriction: Right to restrict processing in certain circumstances
• Complaint: Right to lodge a complaint with your local data protection authority

6. Cookies and Tracking

Our use of cookies and tracking technologies is minimal:

• Authentication: Supabase handles authentication without traditional cookies
• Analytics: Vercel Analytics uses anonymous, privacy-focused tracking that doesn't identify individual users
• No Marketing Cookies: We do not use advertising or marketing tracking cookies

7. Data Security

We implement appropriate security measures to protect your information:

• Secure data transmission using HTTPS encryption
• Secure cloud storage through Supabase with industry-standard protections
• Regular security updates and monitoring
• Limited access to personal data on a need-to-know basis

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

9. International Data Transfers

Your information may be processed and stored in:

• European Union: Primary hosting in EU-North-1 (Stockholm) region
• United States: Some third-party services (OpenAI, Stripe) may process data in the US

When data is transferred outside the EU, we ensure appropriate safeguards are in place, including standard contractual clauses and adequacy decisions.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on our website and updating the "Effective Date." Your continued use of the Service after such changes constitutes acceptance of the updated Privacy Policy.

11. Contact Information

Data Controller: ChessArc

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

• Email: chessarcapp@gmail.com
• Subject Line: "Privacy Policy Inquiry" for faster response

We aim to respond to all privacy-related inquiries within 30 days.