BackThis

Legal

Privacy Policy

Last updated: April 2026

1. Who we are

BackThis is operated by LE 589X LLC, located at 1401 21st St Ste R, Sacramento, CA 95811.

2. Information we collect

We collect name, email address, date of birth, school name, parent or guardian information (for users under 18), story responses, funding item details, IP address, device information, and payment data (processed and stored exclusively by Stripe). See our Data Policy for comprehensive details.

3. How we use data

We use data to create and display student fundraising pages, process contributions through Stripe, send transactional emails (auth codes, receipts, notifications), maintain audit trails for compliance, notify guardians of page creation and contributions, and improve platform performance and security.

4. Legal basis for processing

We process personal data based on contractual necessity (to process contributions and manage pages), legitimate interest (platform security, fraud prevention), and consent (guardian consent for users under 18).

5. Children's privacy (COPPA)

BackThis does not knowingly collect personal information from children under 13. Users between 13 and 17 may use the platform only with verifiable parental or guardian consent. When a minor creates a page, we collect the parent or guardian's name and email, send the guardian a notification email about the page creation, require guardian consent acknowledgment before the page is created, and route Stripe Connect account creation through the guardian. If we discover that a user under 13 has created an account, we will promptly delete their information. Parents or guardians may contact us at privacy@backth.is to review, request deletion of, or refuse further collection of their child's information.

6. Data sharing

We share data with Stripe (payment processing), SendGrid (transactional emails), and legal authorities when required by law. Contributor information (name and amount) is displayed on the student's public page unless the contributor chooses to be anonymous. We never sell personal data.

7. Third-party services

We use Stripe for payments, SendGrid for email, and Vercel for hosting. Each provider has their own privacy policies. We do not use advertising trackers.

8. Data retention

Contribution records and associated data are retained for a minimum of 3 years for financial record-keeping. Student page data is retained for the duration of the account. Deletion requests are subject to legal record-keeping obligations.

9. Security

We use TLS encryption for all data in transit, secure HTTP-only session cookies, and immutable audit logging. See our Security page for details.

10. Your rights (CCPA)

California residents may request access to, deletion of, or information about their personal data. We do not sell personal information. Contact privacy@backth.is to exercise your rights.

11. International transfers

Information may be processed in the United States or other countries where our service providers operate.

12. Contact

Privacy inquiries: privacy@backth.is