Privacy Policy
Last updated: 20 June 2026
1. Who we are
The data controller is Satori SpA, RUT 76.XXX.XXX-X, Av. Providencia 1234, Santiago, Chile. Contact: privacidad@satorilearning.app.
Satori is a PAES (Chilean university entrance exam) preparation platform offering live classes, gamified exercises, and timed practice tests to Chilean students.
2. Data we collect
Registration data
Full name, email address, date of birth, phone number (optional), and profile photo (optional).
Academic data
Exercise results, XP points, belt level, practice test answers, response times, and class attendance.
Payment data
Subscription status (active, paused, cancelled) and plan type. Card details are not stored by Satori — they are handled exclusively by MercadoPago.
Technical data
IP address, device and browser type, session data (Supabase), and aggregated performance metrics via Vercel Analytics. Vercel Analytics uses no personal cookies and collects no identifiable data.
If you accept analytics cookies in our consent banner, we additionally use Microsoft Clarity for heatmaps and anonymised session recordings to improve usability. Clarity masks form inputs and personal text by default. You can opt out at any time by clearing site data and choosing "Essential only" when the banner reappears.
3. Legal basis for processing
- Contractual necessity: processing of registration and academic data is required to deliver the educational service.
- Consent: for data of minors, consent is provided by the parent or legal guardian at registration.
- Legitimate interest: for technical data and aggregated analytics used to improve the platform.
4. Minors
Satori may be used by persons under 18 only with the prior express consent of a parent or legal guardian. This consent is collected at registration via a mandatory checkbox, where the user declares that such authorisation has been granted.
Data of minors is limited strictly to educational purposes and is never shared with third parties for commercial or advertising purposes.
If you are a parent or guardian and wish to review, modify, or delete a minor's data, contact us at privacidad@satorilearning.app.
5. International data transfers
Your data may be processed by the following third-party services:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database & authentication | EU — Frankfurt, Germany |
| Vercel | Hosting & infrastructure | USA — Standard Contractual Clauses |
| MercadoPago | Payment processing | Chile / Argentina |
| Zoom | Live classes | USA |
| Microsoft Clarity | Heatmaps & session replay (opt-in only) | USA |
6. Retention period
We retain your personal data for the duration of your active account. After account cancellation, data is kept for an additional 12 months to meet legal obligations and resolve disputes, then deleted or irreversibly anonymised.
7. Your rights
Under Chilean law you have the right to:
- Access: request a copy of the data we hold about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure: request deletion of your data when no longer necessary.
- Objection: object to processing in certain circumstances.
To exercise any of these rights, email privacidad@satorilearning.app. We will respond within 30 business days.
9. Security
- All communications use HTTPS / TLS encryption.
- Passwords are not stored by Satori; authentication is delegated to Google OAuth and Supabase Auth.
- No card data is stored by Satori.
- Database access is protected by Supabase Row-Level Security (RLS).
- Administrative access is restricted and audited.
10. Applicable law
This Privacy Policy is governed by Chilean law, in particular Law 21.719 on Personal Data Protection (progressively replacing Law 19.628). Disputes will be submitted to the courts of Santiago, Chile.
We may update this policy periodically. Material changes will be notified by email at least 15 days in advance.