Privacy Policy

1. Who We Are

Backsurge ("we", "us", "our") operates a content experimentation and analytics platform for creators. This policy explains what data we collect, how we use it, and your rights regarding it.

2. Data We Collect

• Account data: Email address and account credentials when you sign up.
• Platform connection data: OAuth tokens and basic profile information (username, platform user ID) from connected accounts (YouTube, TikTok, Instagram, Facebook).
• Content metadata: Video titles, descriptions, and thumbnail URLs retrieved via platform APIs to populate your dashboard.
• Analytics data: Performance metrics (views, impressions, CTR, watch time, revenue estimates) fetched from connected platform APIs.
• Experiment data: Records of changes you apply through Backsurge, including original and modified metadata, start/end dates, and outcome metrics.
• Usage data: Log files, IP addresses, browser type, and page interactions collected automatically to maintain and improve the Service.

3. How We Use Your Data

We use collected data to: provide and improve the Service; run experiments you initiate; generate analytics and performance comparisons; send you alerts about video performance; communicate service updates or support responses; and comply with legal obligations. We do not sell your personal data to third parties.

4. Third-Party Platform Access

When you connect a platform account, we request only the permissions necessary to read your content metadata and analytics, and to apply metadata changes you explicitly initiate. We store OAuth tokens securely and use them only on your behalf. You can revoke access at any time via the platform's own settings or within Backsurge.

5. Data Sharing

We do not sell, rent, or trade your personal information. We may share data with: infrastructure providers (e.g. Supabase for database hosting) under data processing agreements; analytics tooling strictly for service improvement; or law enforcement when legally required. All third-party processors are contractually bound to protect your data.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or for fraud prevention. Anonymized aggregated usage data may be retained indefinitely.

7. Security

We implement industry-standard security measures including encryption at rest and in transit, access controls, and regular security reviews. No method of transmission over the internet is 100% secure. In the event of a data breach that affects your personal data, we will notify you as required by applicable law.

8. Cookies

We use essential cookies and session tokens to keep you logged in and to maintain your preferences. We do not use third-party advertising cookies. You can disable cookies in your browser but this may affect Service functionality.

9. Your Rights

Depending on your jurisdiction, you may have the right to: access a copy of your personal data; correct inaccurate data; request deletion of your data; object to or restrict certain processing; and data portability. To exercise any right, contact us at hello@backsurge.io. We will respond within 30 days.

10. Children's Privacy

The Service is not directed at children under 16. We do not knowingly collect personal information from anyone under 16. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via a notice in the Service. The "last updated" date at the top of this page reflects the most recent revision.

12. Contact

For privacy-related questions or requests, contact us at hello@backsurge.io.