Privacy Policy
Last updated: 27 October 2026
1. Who we are
The data controller is SATORI SPA, RUT 78.479.997-2,San Clemente 8021, Santiago de Chile, Chile. Contact: paul@satorilearning.app.
Satori is a PAES (Chilean university entrance exam) preparation platform offering live classes, gamified exercises, and timed practice tests to Chilean students.
2. Data we collect
Registration data
For the public mini diagnostic and Free account we initially request only an email address. Full name, date of birth, Chilean ID and guardian details are requested only after a paid plan is activated, where necessary to provide and protect the educational service.
Academic data
Exercise results, belt and roadmap progress, practice test answers, response times, and class attendance.
Payment data
Subscription status (active, paused, cancelled) and plan type. Card details are not stored by Satori — they are handled exclusively by Flow.
Technical data
IP address, device and browser type, session data (Supabase), and aggregated performance metrics via Vercel Analytics. Vercel Analytics uses no personal cookies and collects no identifiable data.
If you accept optional cookies in our consent banner, we additionally use Google Analytics, Microsoft Clarity, Meta Pixel and consent-gated server-side purchase measurement to measure visits, checkout starts and confirmed purchases from our advertising campaigns. Google Analytics and Meta receive the confirmed purchase amount, currency, a pseudonymous order reference and, where available, consented GA client/session or Meta browser/click identifiers. We do not send form contents, payment details, account data, IP addresses, phone numbers or email addresses in these purchase events. You can withdraw consent at any time with the Cookies control shown on the site; this clears optional identifiers and suppresses unsent server-side purchase events tied to that browser.
Optional AI support chat data
If you choose to use the public SensAI chat and acknowledge its notice, your question and the recent chat context are sent to the DeepSeek API solely to generate the requested product-information response. Do not include names, contact details, Chilean ID numbers, account or payment information, or sensitive data. Satori does not save the AI chat transcript in its own database. The direct support-ticket option does not send the ticket text to DeepSeek.
3. Legal basis for processing
- Contractual necessity: processing of registration and academic data is required to deliver the educational service.
- Consent: for data of minors, consent is provided by the parent or legal guardian at registration.
- Optional AI-chat consent: the public SensAI chat is activated only after its specific disclosure is acknowledged. A support ticket without AI remains available.
- Optional marketing consent: marketing email is off by default, separate from the requested result email, recorded by purpose and version, and can be withdrawn at any time through the link in each marketing message.
- Optional analytics consent: campaign identifiers and browser/server purchase events are captured and sent to Google or Meta only after the analytics choice is accepted.
- Legitimate interest: for technical data and aggregated analytics used to improve the platform.
4. Minors
Satori may be used by persons under 18 only with the prior express consent of a parent or legal guardian. This consent is collected at registration via a mandatory checkbox, where the user declares that such authorisation has been granted.
Optional advertising measurement is disabled unless an adult visitor, or a minor with guardian authorisation, separately affirms that authority in the analytics banner. Even then, Satori does not send the minor's name, contact, account, IP, form or payment data in a purchase event.
A person under 16 may use the mini diagnostic but may not self-enable optional email marketing or advertising analytics. The paid onboarding performs the fuller age and guardian checks required for the service.
If you are a parent or guardian and wish to review, modify, or delete a minor's data, contact us at paul@satorilearning.app.
5. International data transfers
Your data may be processed by the following third-party services:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database & authentication | EU — Frankfurt, Germany |
| Vercel | Hosting & infrastructure | USA — Standard Contractual Clauses |
| Flow | Payment processing | Chile |
| Zoom | Live classes | USA |
| Microsoft Clarity | Heatmaps & session replay (opt-in only) | USA |
| Google Analytics | Campaign and purchase measurement (opt-in only) | USA — contractual safeguards |
| Meta Platforms | Campaign measurement via Meta Pixel and Conversions API (opt-in only) | USA — contractual safeguards |
| DeepSeek | Optional public SensAI product-information chat | People's Republic of China |
6. Retention period
We retain your personal data for the duration of your active account. After account cancellation, data is kept for an additional 12 months to meet legal obligations and resolve disputes, then deleted or irreversibly anonymised.
Mini-diagnostic records and non-consenting lead records are retained only for account linking, result delivery, fraud/security evidence and legal claims, then deleted or anonymised when no longer necessary. A withdrawn marketing preference is retained as a suppression and consent audit record so we can honour the withdrawal.
Satori does not persist the public SensAI AI-chat transcript in its own database. Questions and recent chat context sent to DeepSeek are processed and may be retained by that provider under its current privacy policy and may be stored outside Chile, including in the People's Republic of China.
7. Your rights
Under Chilean law you have the right to:
- Access: request a copy of the data we hold about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure: request deletion of your data when no longer necessary.
- Objection: object to processing in certain circumstances.
- Marketing withdrawal: withdraw consent as easily as it was given, without affecting the mini diagnostic or account.
To exercise any of these rights, email paul@satorilearning.app. We will respond within 30 business days.
9. Security
- All communications use HTTPS / TLS encryption.
- Passwords are not stored by Satori; authentication is delegated to Google OAuth and Supabase Auth.
- No card data is stored by Satori.
- Database access is protected by Supabase Row-Level Security (RLS).
- Administrative access is restricted and audited.
10. Applicable law
This Privacy Policy is governed by Chilean law, in particular Law 21.719 on Personal Data Protection (progressively replacing Law 19.628). Disputes will be submitted to the courts of Santiago, Chile.
We may update this policy periodically. Material changes will be notified by email at least 15 days in advance.