What student data we collect

For each student page, we collect: full name, email address, date of birth, school name, story responses (answers to guided prompts), funding item details and amounts. For students under 18, we also collect: parent or guardian name, parent or guardian email address, and guardian consent acknowledgment with timestamp and IP address.

What contributor data we collect

For each contribution, we collect: name (optional, may be anonymous), email address (optional, for receipts), contribution amount, IP address and device information, and payment data (processed and stored exclusively by Stripe — we never see or store card numbers).

Who can access data

Students can access their own page data and contribution history. Guardians receive email notifications about page creation and contributions for students under 18. BackThis staff may access data for platform operations, support, and compliance purposes. Stripe processes and stores payment card data. Contributors' names and amounts are visible on the public page unless they choose to be anonymous.

Data retention

We retain contribution records for a minimum of 3 years for financial record-keeping. Student page data is retained for the duration of the account. After account deletion, we retain records as required by law and delete all other data within 90 days.

Data sharing

We never sell personal data. We share data only with: Stripe (for payment processing), SendGrid (for transactional email), service providers necessary for platform operation, and law enforcement (when legally required).

Data for minors

We apply additional protections for users under 18: guardian notification for all account activity, limited public display of personal information (name and school only), no sharing of date of birth or guardian contact information publicly, and the right for guardians to request data review or deletion at any time.

California Consumer Privacy Act (CCPA)

California residents have the right to know what personal information we collect, request deletion of their data (subject to legal retention requirements), and opt out of data sales (we do not sell data). Contact privacy@backth.is to exercise your rights.

Data Policy