Privacy Policy

1. Who We Are

Satranç İstanbul is a chess education school operating in Istanbul, Turkey. This Privacy Policy describes how we collect, use, and protect personal data when you use our portal at panel.satrancistanbul.com.tr and our integrations with Meta platforms including Instagram, WhatsApp Business, and Facebook.

Business name: Satranç İstanbul
Contact email: satrancistanbul@gmail.com
App: Satranc İstanbul (Meta App ID: 1236436764898976)

2. Data We Collect

We collect the following data from students, parents, teachers, and administrators:

• Full name, date of birth, and school branch of students
• Parent/guardian contact phone numbers
• Lichess usernames (for chess rating tracking)
• Attendance and homework records maintained by teachers
• Payment information (fee amounts, bank transfers — stored offline only)
• WhatsApp messages sent to our business phone number (+90 532 ...)
• Instagram direct messages sent to our business account (@satrancistanbul)
• Facebook Page messages sent to our Page
• Page metadata for Instagram/Facebook accounts the user owns

3. How We Use Data

• Registration & attendance: To maintain student records, track attendance, assign students to class groups.
• WhatsApp Business messaging: To respond to parent inquiries, send lesson reminders, send level-test forms, and communicate class information.
• Instagram Business Messaging: To respond to prospective students and parents who reach us via Instagram DM.
• Facebook Page messaging: To respond to inquiries received via our Facebook Page.
• Page management: To read our Instagram/Facebook pages and post/manage content on behalf of our business.
• Payment tracking: To record monthly fee payments and identify outstanding balances.

4. How We Share Data

We do not sell personal data. We share data only with the following categories of recipients:

• Meta Platforms, Inc. — for Instagram, WhatsApp, and Facebook Business messaging API functionality
• Airtable Inc. — as our student database backend
• Google LLC — for Google Sheets storage of attendance records
• Vercel Inc. — for hosting this web portal
• Anthropic PBC — for AI-assisted message routing and administrative tasks (processed on request only)

All recipients are bound by their own contractual data protection obligations.

5. Data Retention

We retain active student data for as long as the student is enrolled at our school. When a student leaves, their record is moved to an archive and retained for one additional month (in case of returning), after which it is anonymized or deleted. Payment records are retained for seven years as required by Turkish tax law.

6. User Rights

Under applicable law (including Turkey's KVKK and, where applicable, GDPR), you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent

To exercise these rights, email us at satrancistanbul@gmail.com.

7. Meta-Specific Data Handling

For data obtained via Meta platforms (Instagram, WhatsApp, Facebook), we use this data solely to communicate with the user who contacted us and to manage the official business pages owned by Satranç İstanbul. We do not:

• Sell or rent Meta-derived data to third parties
• Use Meta-derived data for advertising targeting outside Meta's own ad platform
• Access user data beyond what is necessary for the described use case

Users can disconnect our app from their Meta account at any time via Meta's Business Settings. When an app connection is removed, we stop collecting new data and delete related data within 30 days.

8. Security

Data is protected in transit via TLS/HTTPS. Access to our internal databases requires authentication. API tokens for Meta and Google APIs are stored in encrypted environment variables on Vercel. Only authorized personnel (school administrators) can access raw student records.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a new "Last updated" date.

10. Contact

For any privacy-related questions, contact us at:
Email: satrancistanbul@gmail.com
Business: Satranç İstanbul (Istanbul, Turkey)