Privacy Policy

Backfetch, LLC operates BackFetch and is responsible for the account and operational information described here. This notice covers our website, dashboard and available APIs. A customer’s use of content obtained through an API may involve separate privacy obligations; that customer is responsible for its own purposes and uses.

Account information includes your email, optional name, language preference, workspace membership and permissions. Authentication records include password hashes, security settings, session identifiers, IP addresses and device/browser information. Google or an organization’s sign-in provider may supply an account identifier, verified email, name and profile image.

Billing records include your workspace balance, usage charges, invoices, payment references and saved-card details such as brand, last four digits and expiry. Stripe handles payment credentials entered at checkout. We also process requests and the inputs and outputs needed to deliver API operations, as well as communications you send us.

For evidence of an agreement, we record the accepted terms version, time, account, sign-in or purchase method and, where available, IP address and browser information. Contract acceptance is separate from consent to optional marketing or tracking.

We use information to create and secure accounts, operate workspaces, fulfill requests, meter usage, take payments, send essential account notices, provide support and investigate errors or abuse. We also use relevant records to meet accounting and legal obligations and establish or defend legal claims.

Where data-protection law requires a legal basis, these purposes rely on performing a contract, complying with legal obligations, and our legitimate interests in running and protecting the Services, as applicable. We seek consent where an activity requires it. Optional consent can be withdrawn without undoing earlier lawful processing.

Hosting, infrastructure, email, payment and authentication providers receive the information needed for their role. Workspace administrators and members can see information permitted by their role, including membership and workspace activity. When fulfilling a request, the relevant target website or upstream provider may receive request information needed to serve it.

We may disclose information when legally required or necessary to investigate abuse, protect rights or handle a business transfer with appropriate safeguards. Where processing crosses borders and applicable law requires transfer safeguards, those safeguards must cover the transfer. We do not grant customers rights to repurpose other customers’ account information.

We retain information for as long as needed for the purpose it serves, including account operation, security investigations, accounting requirements and legal claims. Deleting an account does not immediately erase records that must be retained for those purposes, or workspace records that other members still need. Retention depends on the record and applicable requirements.

We use access controls and authentication safeguards to protect information. No system eliminates every risk. Protect your own credentials, review workspace access and use the available security settings. Do not send secrets or unnecessary personal information in API inputs.

You can update profile information, review sessions and manage security settings in your account. Depending on applicable law, you may also request access, correction, deletion, restriction, portability or object to certain processing by contacting Backfetch, LLC. We may need to verify your identity and assess legal retention requirements. You may complain to the competent data-protection authority where that right applies.

The Services are intended for adults, and are not directed to children. The Cookie Policy describes essential browser storage used for preferences and sign-in. Material updates to this notice will be identified by an updated date and communicated where applicable law requires.