Privacy Policy

1. Who We Are

Backsurge ("we", "us", "our") operates a content experimentation and analytics platform for creators. This policy explains what data we collect, how we use it, and your rights regarding it.

2. Data We Collect

• Account data: Email address and account credentials when you sign up.
• Platform connection data: OAuth tokens and basic profile information (username, platform user ID) from connected accounts (YouTube, TikTok, Instagram, Facebook).
• Content metadata: Video titles, descriptions, and thumbnail URLs retrieved via platform APIs to populate your dashboard.
• Thumbnail backups: When you run an experiment that changes a video's thumbnail, we download and securely store the original thumbnail images so you can revert if needed.
• Analytics data: Performance metrics (views, impressions, CTR, watch time, revenue estimates) fetched from connected platform APIs.
• Experiment data: Records of changes you apply through Backsurge, including original and modified metadata, start/end dates, and outcome metrics.
• Billing data: If you subscribe to a paid plan, payment information is processed securely by our third-party payment processor. We do not store credit card numbers.
• Usage data: Log files, IP addresses, browser type, and page interactions collected automatically to maintain and improve the Service.

3. How We Use Your Data

We use collected data to: provide and improve the Service; run experiments you initiate; generate analytics and performance comparisons; back up and restore content (thumbnails, titles, descriptions); send you alerts about video performance; communicate service updates or support responses; process payments for paid plans; and comply with legal obligations. We do not sell your personal data to third parties.

4. Third-Party Platform Access

When you connect a platform account, we request only the permissions necessary to read your content metadata and analytics, and to apply metadata changes you explicitly initiate. We store OAuth tokens securely and use them only on your behalf. You can revoke access at any time via the platform's own settings or within Backsurge.

5. Data Sharing

We do not sell, rent, or trade your personal information. We may share data with: infrastructure providers (e.g. Supabase for database and storage hosting) under data processing agreements; payment processors for subscription billing; analytics tooling strictly for service improvement; or law enforcement when legally required. All third-party processors are contractually bound to protect your data.

6. Data Retention

We retain your data for as long as your account is active. Thumbnail backups are retained for the duration your experiment records exist. The number of historical changes stored depends on your plan tier. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or for fraud prevention. Anonymized aggregated usage data may be retained indefinitely.

7. Security

We implement industry-standard security measures including encryption at rest and in transit, access controls, and regular security reviews. No method of transmission over the internet is 100% secure. In the event of a data breach that affects your personal data, we will notify you as required by applicable law.

8. Cookies & Tracking

We use essential cookies and session tokens to keep you logged in and to maintain your preferences. We use a consent banner to obtain your preference before setting any non-essential cookies. We do not use third-party advertising cookies. You can manage your cookie preferences at any time through your browser settings or our cookie banner. Disabling essential cookies may affect Service functionality.

9. Your Rights

Depending on your jurisdiction (including under GDPR, CCPA, and other applicable laws), you may have the right to: access a copy of your personal data; correct inaccurate data; request deletion of your data; object to or restrict certain processing; data portability; and opt out of the sale of personal information (we do not sell your data). To exercise any right, contact us at hello@backsurge.com. We will respond within 30 days.

10. Children's Privacy

The Service is not directed at children under 16. We do not knowingly collect personal information from anyone under 16. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time, including changes related to pricing tiers, data retention limits, and storage policies. We will notify you of material changes by email or via a notice in the Service. The "last updated" date at the top of this page reflects the most recent revision. Continued use of the Service after changes constitutes acceptance.

12. Contact

For privacy-related questions or requests, contact us at hello@backsurge.com.