Privacy Policy

We collect only what is needed to deliver our chess-coaching service:

• Parent / guardian details: name, email, phone number, country, and billing information.
• Student details: first name, age or date of birth, playing level, learning goals, and optional avatar. We do not collect a student's school, home address, or government IDs.
• Session & learning data: attendance, homework submissions, coach notes, ratings, and progress reports.
• Payment data: processed by Razorpay; card numbers never touch our servers. We only retain payment status, order ID, and last-4 metadata.
• Technical logs: IP address, browser, device type, and pages visited (used for security and analytics).

• Deliver classes, homework, coach feedback, and progress reports.
• Schedule sessions and send reminders via email, WhatsApp, and in-app notifications.
• Process payments and issue invoices.
• Improve teaching methods (aggregated, anonymised only).
• Prevent fraud and secure our systems.

We do not sell your data. We do not serve behavioural ads to children.

A parent or legal guardian must create the account and provide verifiable consent before we collect any information about a child. Parents may review, correct, or delete their child's data at any time by writing to info.64square@gmail.com. We minimise the personal information collected from minors and never require more than is necessary to run a class.

We process personal data under the following bases: (a) performance of the coaching contract with you; (b) your consent for optional communications; (c) our legitimate interest in improving the service and preventing fraud; (d) compliance with legal obligations (tax, accounting).

We share limited data only with vetted providers who help us run the service:

• Razorpay — payment processing.
• Resend — transactional email delivery.
• Cloud infrastructure — hosting, backups, CDN (currently Emergent + Cloudflare).
• Zoom / Google Meet — live-class video (only during session hours).

All sub-processors are bound by data-protection agreements. We never share data with advertisers or data brokers.

Our servers are located in India and the EU. When we transfer data across borders (e.g. serving a US parent), we rely on Standard Contractual Clauses (SCCs) or equivalent safeguards.

Active accounts: for as long as the family uses our service. Inactive accounts: deleted after 24 months of inactivity. Financial records: retained for 7 years for tax compliance. Recorded classes (if any): 90 days unless the parent requests earlier deletion.

Depending on your region, you have the right to:

• Access a copy of your (or your child's) personal data.
• Correct inaccurate data.
• Delete data ("right to be forgotten").
• Object to or restrict processing.
• Port your data to another provider.
• Withdraw consent for optional communications at any time.

To exercise any right, write to info.64square@gmail.com. We respond within 30 days.

We use TLS/HTTPS for all traffic, bcrypt for password hashing, JWT for session tokens, encrypted MongoDB backups, and role-based access control internally. No system is 100% secure, but we work hard to keep yours safe.

We use essential cookies for authentication and site functionality. We do not use tracking or advertising cookies. Analytics (if enabled) are anonymised.

We will notify you by email (and via a banner on the site) of any material changes at least 14 days before they take effect.

For any privacy question or grievance under the DPDP Act 2023:
Grievance Officer — Sixty-four Square Chess Academy Pvt Ltd
Email: info.64square@gmail.com
Address: Mumbai, Maharashtra, India (full postal address on request)