Privacy Policy

1. Who we are

CHI is a training and knowledge organisation based in Istanbul, Türkiye. This website lets visitors browse our published content (trainings, publications, news, working groups) and lets registered users create an account, enrol in courses, join working groups, and manage their organisation's staff.

2. What we collect

Depending on how you use the site, we may process:

• Account data — name, email address, organisation name and job title (for organisation accounts), and a securely hashed password. We never store your password in plain text.
• Activity data — the trainings you register for, the working groups you join, and certificates issued to you.
• Contact form data — your name, email, and the content of any message you send us.
• Technical data — standard server logs (IP address, browser type, timestamps) generated automatically by our hosting provider for security and troubleshooting.

3. How we use it

We use your data to:

• Create and secure your account, and let you sign in
• Process course registrations and working-group memberships and show them in your dashboard
• Send you account-related emails — invitations, password resets, and confirmations
• Respond to messages sent through the contact form
• Keep the platform secure and diagnose technical issues

4. Cookies and local storage

We do not use advertising or tracking cookies. When you sign in, we store a security token in your browser's local storage so you stay signed in between visits — this token is not shared with third parties and is removed when you sign out.

5. Who we share it with

We do not sell personal data. We share limited data with the third-party services that let the platform function, under their own privacy and security terms:

• Railway — our hosting and database provider, which stores account and content data on our behalf
• Resend — our transactional email provider, used only to deliver invite, password-reset, and contact-form emails

6. How long we keep it

We keep account data for as long as your account is active. If you ask us to delete your account, we will remove your personal data within a reasonable period, except where we are required to retain records by law.

7. Your rights

You can review and update most of your account information yourself from Account Settings. You may also ask us to access, correct, or delete your personal data, or to export a copy of it, by contacting us at the address below. Türkiye-based users also have the specific rights set out in our KVKK disclosure.

8. Children

This platform is intended for working professionals and is not directed at children. We do not knowingly collect personal data from anyone under 16.

9. Changes to this policy

We may update this policy as the platform evolves. We will change the "last updated" date above whenever we do, and material changes will be highlighted on this page.

10. Contact

Questions about this policy or your data can be sent to info@chicentre.org.