Privacy Policy

1. Data Controller

ChessMentor AI is operated as an independent entity under the ChessMentor AI brand. For data-related inquiries: contact@chessmentorai.com

2. Data We Collect

• Account: email address, via Clerk (third-party auth).
• Chess games: PGN and metadata imported from Lichess or Chess.com.
• Analyses: Stockfish results, AI annotations, generated playing profiles.
• Payments: processed by Stripe — we store no card data.
• Cookies: Clerk session, language preferences, anonymous analytics (Vercel Analytics).

3. Purposes

• Providing the analysis and coaching service.
• Managing your subscription and payments.
• Improving the service (aggregated, non-identifying analytics).
• Contacting you when you request it.

4. Legal Basis (GDPR)

• Contract performance for service delivery.
• Consent for marketing communications (opt-in).
• Legitimate interest for security and fraud prevention.

5. Data Retention

Your data is retained for the duration of your active account, then deleted within 30 days of account closure, unless required by law (e.g., accounting records: 10 years).

6. Third-Party Services

We do not sell or rent your data. We use:

• Clerk — authentication (privacy policy).
• Stripe — payments (privacy policy).
• Anthropic — AI content generation (game data may be transmitted for analysis).
• Vercel — hosting and anonymous analytics.

7. Your Rights (GDPR)

You have the right to access, correct, delete, and port your data, as well as to object to processing and withdraw consent at any time.

To exercise your rights: contact@chessmentorai.com

8. Security

We use encrypted connections (HTTPS/TLS), bcrypt password hashing, and short-lived JWT tokens. Data is hosted on secure servers in Europe.