Legal
Last updated: 6 October 2026
Enpasso is a product operated by Enpasso Limited (“we”, “our”, “us”). We operate the chess coaching platform available at www.enpasso.com and are the data controller for personal data collected through this service. If you have questions, contact us at privacy@enpasso.com.
Account information
When you create an account we collect your email address and the username you choose. If you sign in via a third-party identity provider (such as Google or Lichess), we receive your email address and the profile details that provider shares, such as your name or username. We use those details only to suggest your Enpasso username; your name is not stored in your Enpasso profile, though it may remain in the sign-in record kept by our authentication provider.
Chess data
Games you import (PGN files or via Lichess), positions you analyse, puzzles you attempt, and coaching conversations are stored to provide the service.
Third-party connections
If you connect a third-party chess account (such as Lichess), we store an access token securely to import your games on your behalf.
Usage data
For public pages, Enpasso immediately aggregates allowlisted page views and selected CTA clicks into daily counts without a visitor, session, or account identifier. You can object to this count-only measurement at any time. If you allow optional analytics, we also collect page views and feature interactions in PostHog; for logged-in users who allow analytics, that information is linked to your account identifier. Enpasso keeps limited operational records needed to secure the service, prevent abuse, deliver AI features, and administer billing.
Payment data
Payments are processed by Paystack (for Nigeria-based purchases) or Polar (for international purchases), depending on your billing region, for subscriptions purchased on our website — monthly or annual. We receive subscription information needed to provide and support your membership, such as the plan, billing interval, purchase or subscription identifier, status, renewal or expiry information, and billing provider. We do not receive or store your card number or other payment credentials.
Push notifications
If you enable notifications in the mobile app, we store a device token (a unique identifier issued by your device’s push notification service) so we can deliver training reminders and other alerts you’ve opted into. You can disable notifications and remove this token at any time from Settings, or by turning off notification permissions for the app on your device.
If you are in the European Economic Area, we process your data on the following legal bases:
We do not sell your personal data. The following third-party services receive data as part of delivering Enpasso:
AI Services
Our AI features are powered by third-party AI providers. Your coach messages and chess positions are sent to these providers to generate coaching responses. Do not include sensitive personal information in coach messages.
Payment processor (web purchases)
Subscriptions purchased on the Enpasso website are processed by a third-party payment processor selected automatically based on your billing region. When you subscribe, your email address and payment details are handled directly by that processor. We receive the subscription status, plan, billing interval, and identifiers needed to provide access and billing support. Your card details never touch our servers.
PostHog
We use PostHog for optional browser product analytics only after you allow it. PostHog then receives page views, feature interactions, and — for logged-in users — your Enpasso account ID as a pseudonymous identifier. We also send limited server-side security, billing, AI-cost, and reliability events needed to operate the service; these do not rely on browser storage and are processed under our legitimate interests. PostHog data is processed and stored in the EU and is not used for advertising. You can decline or withdraw optional browser analytics at any time from Analytics settings.
Email delivery (Zoho)
We use Zoho to deliver email: Zoho ZeptoMail for account and service emails, and Zoho Campaigns for the email updates you have turned on. Zoho receives your email address, your username and the content of the message in order to deliver it, and Zoho Campaigns records if you unsubscribe so that we stop sending you updates.
Lichess (when connected)
If you connect your Lichess account, we store a secure access token to import your games on your behalf. Lichess’s own privacy policy governs data on their platform.
We retain your account data for as long as your account is active. Deleting your account from the settings page removes your profile, imported games, repertoires, prep sessions, coaching conversations, and connected third-party tokens. It also submits deletion of your PostHog person, linked events, and any recordings; PostHog processes event and recording deletion asynchronously. Anonymous public-site daily totals may be retained for historical comparison because no visitor-level record exists. For service security and abuse investigation, Enpasso retains a restricted AI interaction audit for up to 90 days after collection. Those records are separated from your deleted account using a pseudonymous hash; message content is retained only when a safety signal was raised.
Depending on your location, you may have the right to:
To exercise any of these rights, email support@enpasso.com.
Enpasso is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe your child has provided us with personal information, please contact support@enpasso.com and we will delete it promptly.
We use cookies and local storage for essential functions such as sign-in, preferences, offline operation, and remembering your analytics choice. PostHog analytics storage is enabled only after you allow optional analytics. We do not use advertising trackers. See our Cookie Policy for details.
We use industry-standard security measures to protect your data, including encryption in transit and access controls on our database. No transmission over the internet is 100% secure — if you believe your account has been compromised, contact us immediately.
We may update this policy from time to time. We will notify you of material changes by email or by a notice in the application. Continued use of the service after changes take effect constitutes acceptance of the updated policy.
Questions about this policy: support@enpasso.com