Skip to main content

Legal

Privacy Policy

Last updated: May 2026

1. Who we are

BackThis is operated by LE 589X LLC, located at 1401 21st St Ste R, Sacramento, CA 95811.

2. Information we collect

We collect name, email address, date of birth, school name, parent or guardian information (for users under 18), story responses, funding item details, profile photos, IP address, and device information. For backers who set up recurring monthly backing, we also store a Stripe customer ID and subscription ID. Payment card data is processed and stored exclusively by Stripe โ€” we never see or store card numbers. See our Data Policy for comprehensive details.

3. How we use data

We use data to create and display student pages, process one-time and recurring backing through Stripe, send transactional emails (sign-in codes, receipts, notifications), maintain audit trails for compliance, notify guardians of page creation and backing activity, provide backers with subscription management links, and improve platform performance and security.

4. Legal basis for processing

We process personal data based on contractual necessity (to process backing and manage pages), legitimate interest (platform security, fraud prevention), and consent (guardian consent for users under 18).

5. Children's privacy (COPPA)

BackThis does not knowingly collect personal information from children under 13. Users between 13 and 17 may use the platform only with verifiable parental or guardian consent. When a minor creates a page, we collect the parent or guardian's name and email, send the guardian a notification email about the page creation, require guardian consent acknowledgment before the page is created, and route Stripe Connect account creation through the guardian. If we discover that a user under 13 has created an account, we will promptly delete their information. Parents or guardians may contact us at privacy@backth.is to review, request deletion of, or refuse further collection of their child's information.

6. Data sharing

We share data with Stripe (payment processing), SendGrid (transactional emails), and legal authorities when required by law. Backer information (name and amount) is displayed on the student's public page unless the backer chooses to back anonymously. We never sell personal data.

7. Third-party services

We use Stripe for payment processing, SendGrid for transactional email, Vercel for application hosting, Neon for database hosting, Cloudflare R2 for image storage, and Google for OAuth sign-in. Each provider has their own privacy policies. We do not use advertising trackers or analytics cookies.

8. Cookies

BackThis uses only essential cookies required for the platform to function. We set a single session cookie (bt_session) to keep you signed in. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. No cookie consent banner is required because we only use strictly necessary cookies.

9. Data retention

Backing records and associated data are retained for a minimum of 3 years for financial record-keeping. Subscription data is retained for the duration of the subscription plus 3 years. Student page data is retained for the duration of the account. Deletion requests are subject to legal record-keeping obligations.

10. Security

We use TLS encryption for all data in transit, secure HTTP-only session cookies, and immutable audit logging. See our Security page for details.

11. Your rights (CCPA)

California residents may request access to, deletion of, or information about their personal data. We do not sell personal information. Contact privacy@backth.is to exercise your rights.

12. International transfers

Information may be processed in the United States or other countries where our service providers operate.

13. Contact

Privacy inquiries: privacy@backth.is