01What CHESSLA processes
CHESSLA processes your name, account email, date of birth, selected public Chess.com profile, public games you choose to import, generated analyses, private ply notes, Nikola conversations, Club entitlement status, and minimal technical and security logs. Stripe processes payment details; CHESSLA does not store card numbers.
02Account details and age
Your name personalizes your private account. Date of birth is used to confirm age eligibility, is never displayed publicly, and is not sent to Nikola. The Chess.com username you select identifies public chess data; it need not be your own account and is not treated as ownership verification.
03Wishlist
Before launch, the wishlist stores the email address you provide, plus an optional first name and public Chess.com username. We use it only to manage early access and send CHESSLA launch updates you requested. We do not store your IP address or browser details with the entry. Ask us to remove it at any time; otherwise we retain it until the launch outreach is complete or you withdraw consent.
04Why
We process data to provide your account, import and analyze games, keep Nikola useful, enforce limits, process Club access, secure the service, and meet legal obligations. Optional analytics require the consent shown when they are enabled.
05Optional analytics
If you opt in, Google Analytics receives page views plus navigation, CTA, FAQ, and product-preview interactions. We do not send game contents, Nikola conversations, typed text, or advertising identifiers. Analytics does not load before consent, your choice is stored for up to 180 days, and you can withdraw consent through Analytics Settings in the footer.
06Improving CHESSLA
We may use de-identified and aggregated game, product, and usage data to improve analysis, coaching, reliability, and future features. We do not make identifiable player data public for a future leaderboard or similar feature without a separate visible choice.
07Service providers
Hosting and backups run through AWS; payments run through Stripe. When you use Nikola, an external generation service receives your prompt, relevant conversation and coaching context, and supporting chess facts, which may include public player usernames and game links. We do not automatically include your account password, card data, or date of birth; personal information you type into a message is part of that message. Processing is not limited to the United States. The generation service's published privacy policy describes processing and storage in China, but excludes end-user data submitted through developer applications from its scope. The public documents we reviewed do not establish API-specific retention periods or a no-training guarantee for CHESSLA conversations. We have not verified a contractual international-transfer safeguard for this service and do not claim one is in place. Do not include sensitive personal information in your messages.
08Nikola conversation history
Raw Nikola chats are kept until you delete them by default. In Profile you may instead choose automatic deletion after 30 days, 90 days, or one year, download or delete your chat history, and delete individual chats. Coaching memory is separate: it stores selected context Nikola may recall across conversations and has its own controls. Expired or deleted history is removed from CHESSLA's active systems; deletion from backups follows lawful, security, and disaster-recovery backup retention and may not be immediate. Deleting a chat in CHESSLA does not automatically delete copies held by the generation service. Contact support@chessla.net for help with requests involving that service. CHESSLA does not use identifiable Nikola conversation text to train its own models without a separate explicit opt-in; this is not a guarantee about the generation service's training practices.
09Private review notes
Private ply notes stay excluded from Patterns and Profile. Their text is sent to Nikola's configured generation service only when you explicitly send that note to Nikola. Notes remain attached to your account until you clear the note or delete the account, subject to lawful backup retention.
010Your rights
You may ask for confirmation, access, correction, portability, information about sharing, or deletion of your personal data, and may revoke consent where consent is the basis for processing. You can delete your CHESSLA account in Profile; lawful retention obligations may still apply.
011LGPD and GDPR
CHESSLA applies the transparency and data-subject-control principles of Brazil's LGPD and, where applicable, the GDPR. This notice explains the categories, purposes, providers, retention approach, and control available to you.