1. Information We Collect
We collect the following information when you use Backdrop:
- Account information: Email address, name, and password (stored securely via Supabase Auth).
- Archived content: Web pages, screenshots, PDFs, and files you choose to archive or upload.
- Browser extension data: When you use the Backdrop browser extension, we collect the URL of the page you are viewing only when you actively open the extension panel, highlight text, tag an entity, or archive a page. We also collect the text you choose to highlight or annotate, and the screenshots you choose to capture. The extension does not collect browsing history, transmit data in the background, or operate without your explicit action.
- Usage data: Basic analytics about how you interact with the Service.
- Payment information: Billing details are processed by Stripe. We do not store full payment card numbers.
2. How We Use Your Information
- To provide and maintain the Service (store and serve your archived content).
- To process payments and manage subscriptions.
- To send service-related communications (renewal notices, security alerts).
- To improve the Service based on usage patterns (not your individual content).
3. Data Storage & Security
Your data is stored on Supabase (PostgreSQL) and Supabase Storage. We use industry-standard encryption in transit (TLS) and at rest. We implement Row Level Security to ensure your data is only accessible to you and authorized team members.
4. Data Sharing
We do not sell your personal information. We may share data with third-party service providers necessary to operate the Service:
- Supabase — database and file storage.
- Stripe — payment processing.
- Redis / BullMQ — background job queue for archiving.
These providers are contractually obligated to keep your data secure and use it only for the purposes we specify.
5. Your Rights & Choices
- You can access, update, or delete your account and data at any time from your settings page.
- You can export your data from the dashboard.
- You can unsubscribe from marketing emails at any time.
- You can request full deletion of your data by contacting us.
6. Data Retention
We retain your data for as long as your account is active. If you delete your account, we permanently delete your archived content, uploaded files, and personal information within 30 days. Backups may persist for up to 90 days.
7. Cookies
We use essential cookies for authentication and session management. We do not use third-party tracking cookies or behavioral analytics. The authentication cookie is set by Supabase Auth and is necessary for the Service to function.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of material changes via email or in-app notification.
9. Contact
For privacy-related questions or data requests, contact us at [email protected].