Privacy Policy

X32 provides chess education, academy operations, and related online services. This policy explains the information X32 handles when you use the website, create an account, book a demo, receive academy services, or use Ask X32 AI.

This policy should be read with the Terms of Service.

Account and profile information may include name, email address, phone number where supplied, profile image or avatar where supplied, authentication/account information, date of birth, and course or level information.

For students and parents, X32 may handle enrollment, batches, sessions, attendance, homework, progress, certificates, support records, and operational notifications. Demo information may include contact details, child/student details, age, chess experience, requested level, teaching language, preferred time, demo status, and relevant payment or refund information.

Contact enquiries may include name, email address, current level, and the message you send. Payment and billing records may include payment status, provider and transaction references, invoices, receipts, refund or reconciliation records, and subscription or AutoPay information where applicable. X32 does not receive or store raw card or bank credentials when payments are handled through hosted payment-provider flows.

For privacy purposes, a person under 18 is treated as a minor. X32 may collect guardian declaration and consent evidence for minor registration and may maintain linked Parent/Student relationships where accounts are linked. A guardian declaration alone is not presented as independently verified guardian identity.

Where appropriate, X32 involves a linked parent or guardian in managing a minor's information and marketing preferences. Requests concerning a minor may require appropriate identity and authority checks.

X32 uses information to create and administer accounts; arrange demos; provide chess education; manage enrollment, payment, refunds, batches, classes, attendance, progress, certificates, and support; send service communications; protect the service; prevent misuse or fraud; maintain operational and audit records; and operate Ask X32 AI.

Optional marketing updates are separate from service communications. X32 records separate Email and WhatsApp marketing preferences where a person makes an affirmative choice. Ordinary account creation, demo booking, contact submission, enrollment, or payment does not itself create marketing consent.

Marketing preference is managed separately for Email and WhatsApp. Consent and withdrawal evidence may include channel, source, version, timing, and guardian context where relevant. Users may change settings when authenticated. Email marketing may also include an unsubscribe mechanism when marketing email is introduced. WhatsApp marketing is not currently an active delivery channel.

Necessary account, security, payment, enrollment, class, support, and other operational messages are not marketing communications and may still be sent where reasonably needed to provide the service.

Ask X32 processes user messages and AI responses to provide academy-support answers. Messages are processed by an external AI service. Completed visible exchanges, timestamps, response metadata, and an opaque conversation identifier may be stored by X32; authorized administrators may access stored conversations for operational, safety, or support purposes.

AI conversations are not linked in the current architecture to a Profile or Student record. Please do not submit sensitive personal information. AI output may be inaccurate and should not be treated as professional advice.

X32 stores certificate and issuance information needed to manage academy certificates. Public certificate verification may display X32-issued certificate information using a certificate number. Public presentation protects student privacy by masking names for minors and using privacy-preserving masking when age is unknown.

X32 uses service providers to operate the platform, including Supabase for authentication and data services, payment providers that are enabled for a transaction, Resend for transactional email when configured, and OpenAI for Ask X32 AI. Providers may process information as needed to provide their services to X32.

X32 uses necessary authentication and session cookies to keep accounts signed in and protect authenticated service flows. The current application does not implement non-essential analytics tracking or a cookie-consent banner.

X32 may retain information for as long as reasonably necessary to provide services, administer accounts, maintain financial and consent records, protect security, resolve disputes, and meet reasonable operational or legal obligations. A deletion request may not remove records X32 reasonably needs to retain for these purposes.

X32 uses reasonable technical and organizational safeguards designed to protect information. No internet-based system can guarantee absolute security.

To request access, correction, or deletion, contact hello@x32chess.com. X32 may verify identity and authority before acting, including linked parent or guardian authority for a minor. This application does not currently provide self-service account deletion.

X32 may update this policy as services develop. Material updates will be reflected by changing the effective date on this page.