Privacy Policy
Effective Date: 1 August 2025  Last Updated: 17 November 2025
Backkr ("we," "our," or "us") is committed to protecting your privacy and handling your personal information responsibly.
This Privacy Policy explains how we collect, use, store, and safeguard your information when you use our marketing analytics platform.
‍
1. Information We Collect
We may collect the following personal and business information:
Personal and Contact Information
  Your name, email address, and any other contact details you provide  
Authentication information managed through our third-party authentication service provider
‍
Account Information
  Login credentials, subscription details, and account preferences  
Authentication tokens stored in secure, http Only cookies
Business Information
  Company name, website URL, and business details you choose to share  
Industry type, products and services offered, and marketing goals   Business tone and messaging preferences from your onboarding responses
‍
Technical Data
  IP address for region detection and pricing localization  
Browser cookies (authentication and session management)  
Browser local storage for preserving signup progress  
Device type, browser type, and operating system information
‍
Communication Data
  Records of your interactions with our platform and support team
Google Analytics and Google Search Console Data
When you connect your accounts, we collect data via the Google Analytics and Google Search Console APIs, including:
Core Metrics: Active users, sessions, page views, conversions, transactions, and revenue
Engagement Metrics: Session duration, bounce rate, engaged sessions, event counts
Detailed Analytics: Geographic location (country/region), traffic sources, campaigns, devices, browser/OS preferences, landing pages, page paths, content engagement
E-commerce Data: Purchases, categories, items, and transaction details
Demographics & Ads Data: Age ranges, gender, and keyword queries (where available)
Temporal Patterns: Usage by time of day and day of week
‍
Website Content
To understand your brand and context, we analyze publicly available content from your website, including:
  Page text, meta descriptions, and titles  
Page structure and calls-to-action  
Forms and conversion elements
We only analyze publicly available information accessible to any internet user.
‍
2. How We Use Your Information
Our primary purpose is to generate personalized marketing strategies and insights.
Specifically, we use your information to:
  Analyze your Google Analytics data to identify patterns and opportunities  
Generate customized strategy recommendations in your Backkr dashboard  
Produce reports and performance visualizations  
Suggest marketing content and SEO improvements based on website analysis  
Process payments and manage subscriptions   Authenticate your account and maintain secure access  
Detect your geographic region for appropriate pricing  
Send service-related communications and support responses
To create marketing content and SEO recommendations:
  Backkr scans your public-facing website to understand your brand  
This information, along with any content you choose to type in, may be sent to third-party AI tools to help generate relevant content  
The data shared includes information you provide and publicly available website content
‍
3. AI-Powered Insights
We use third-party AI services to generate marketing recommendations and content.

What Data is Shared with AI Services:
  Aggregated Google Analytics metrics and behavioral patterns (user counts, session metrics, conversion rates, engagement data)  
Your website URL, business name, and industry - These are shared to provide context for personalized recommendations  
Publicly scraped website content including page text, headings, and calls-to-action  
Geographic data at country/region level (not individual user addresses)  
Business information you provide during onboarding (products, services, goals, tone preferences)

Important Clarifications:
  Individual user-level session data (specific visitor identities) is NOT shared  
Your website URL and business name ARE shared with AI services as necessary context  
Only aggregated, summarized analytics data is processed by AI tools  
Raw Google Analytics API responses are never directly transmitted to AI services

AI Data Handling
  No training use: Third-party AI services claim to not use your data to train their models  
Data deletion: AI services delete processed data within 30 days per their policies  
No direct raw data transfers: Original Google Analytics data never leaves our secure systems without aggregation
‍
4. Data Sharing
We do not sell, rent, or trade your personal information.
Data is shared only in the following limited cases:

With Trusted Service Providers:
We work with carefully selected third-party service providers to deliver our services:
  Authentication Services: For secure user login and account management  
Payment Processors: For subscription billing and payment handling  
AI Services: For generating marketing insights and content recommendations  
Email Services: For transactional emails and marketing communications (if you opt in)  
Cloud Hosting and Infrastructure: For secure data storage and platform operations  
‍
Analytics API Providers (Google): For accessing your Google Analytics and Search Console data
These service providers are contractually obligated to protect your data and use it only for the purposes we specify.
When Required by Law: To comply with legal obligations, protect rights and safety, or respond to valid legal requests
Google API Services Compliance
Backkr's use and transfer of information received from Google APIs adheres to the [Google API Services User Data Policy](https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

Specifically regarding Google data:
  Access tokens are stored securely with encryption and refreshed automatically  
OAuth refresh tokens are stored in our database and expire after 30 days maximum  
Google data is only accessed when you actively use our service  
You can revoke Backkr's access at any time through your [Google Account settings](https://myaccount.google.com/permissions) or your Backkr dashboard
‍
5. Data Retention and Deletion
Google Analytics data: Retained for up to 3 years to enable historical trend analysis
User account data: Retained until account deletion or 2 years of continuous inactivity
AI-generated insights: Retained for 12 months
Website content analysis: Retained for 6 months or until updated
Authentication tokens: OAuth tokens expire and are automatically deleted after 30 days
Retention Enforcement: Retention periods are enforced through periodic automated data purges and manual reviews.

Deletion Rights
  You may request deletion at any time through your account settings or by contacting us   Upon account deletion, all associated data is permanently deleted within 30 days   Consent for AI processing can be withdrawn at any time (though previously processed data cannot be reversed)   You can disconnect Google Analytics and Google Search Console accounts at any time
‍
6. Data Security
While no system can be guaranteed to be completely secure, Backkr is committed to maintaining industry best practices to protect your information.
Safeguards in Place
Access Controls: Only authorized staff have access to personal information, protected by role-based permissions and multi-factor authentication
Data Minimization & Retention: We only collect the information necessary to deliver our services, and securely delete or anonymize data once no longer required
Monitoring & Auditing: Our systems are regularly reviewed to identify vulnerabilities and prevent unauthorized access or misuse
Secure Infrastructure: We use trusted hosting and storage providers that comply with international standards (ISO 27001, SOC 2)
Encryption: Data is encrypted in transit (TLS/HTTPS) and at rest where applicable
Incident Response: In the event of a suspected data breach, we promptly investigate, mitigate risks, and notify affected users and regulators as legally required
‍
Cookies
We use the following cookies:
Authentication cookies (httpOnly, secure): For maintaining your login session and security
OAuth tokens (httpOnly, secure): For Google Analytics API access (expires in 30 days maximum)
Session data: For preserving your signup progress and user preferences
You can control cookies through your browser settings, but disabling them will prevent you from using core features of our service.
‍
7. Your Rights
You have the right to:
  Access the personal information we hold about you  
Request corrections or updates to your information  
Request deletion or data portability  
Withdraw consent for AI processing  
Object to processing of your data  
Lodge a complaint with a supervisory authority
‍
Account Management
  Update account details in your Backkr dashboard  
Disconnect Google Analytics and Google Search Console accounts at any time  
Revoke Google access through your Google Account permissions  
Cancel your account (triggers full data deletion within 30 days)
‍
8. Legal Basis for Processing
By creating an account and connecting your Google Analytics, you agree that:
  Backkr may access and process your Google Analytics and Google Search Console data  
Aggregated analytics data, along with your website URL and business context, may be shared with AI services for strategy generation   Publicly available website content will be analyzed to provide recommendations  
Your data will be handled according to this Privacy Policy
You maintain the right to disconnect your accounts and request data deletion  at any time through your dashboard or by contacting [team@backkr.com](mailto:team@backkr.com)
‍
9. International Data Transfers
Your data may be processed and stored outside your country of residence.
When we transfer data internationally, we use appropriate safeguards such as:
  Standard contractual clauses approved by relevant authorities  
Ensuring third-party processors maintain adequate data protection standards  
Compliance with applicable data protection frameworks (GDPR, CCPA, etc.)
‍
10. Policy Updates
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements.
  The "Last Updated" date will always reflect the current version  
Material changes will be communicated through our platform, email, or prominent notice  
Continued use of our services after changes indicates acceptance of the updated policy  
For significant changes, we may require renewed consent
‍
11. Additional Disclosures
Children's Privacy
Our services are not intended for individuals under 18. We do not knowingly collect data from children.
If we become aware that we have collected data from a child, we will delete it promptly.
‍
Business Transfers
In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity. The new entity will be bound by the same privacy protections, and you will be notified of any such transfer.
‍
Legal Disclaimer
While we apply industry-standard security measures, no system is 100% secure. By using Backkr, you acknowledge and accept this inherent risk. We will notify you promptly of any data breaches as required by law.
‍
Data Processing
For users in the European Economic Area (EEA), UK, or Switzerland: Backkr acts as a data controller for your account information and a data processor for your Google Analytics data.
You (the account holder) remain the data controller for your Google Analytics data.
‍
12. Contact Us
For questions, requests, concerns, or to exercise your data rights, please contact:
Email: team@backkr.com
Phone: +64 27 766 4199  
Address: Ministry of Awesome, Christchurch, New Zealand
For Data Subject Requests:  Please include "Privacy Request" in your email subject line and provide:
  Your full name and account email

Backkr Marketing Partner Services
‍Effective Date: 1st January 2025  
Last Updated: 20th November 2025

This outlines the terms and conditions for the use of marketing services facilitated by  (hereinafter referred to as "the Company").

By accessing or using our services, you agree to be bound by these terms and conditions.1. Introduction partners with marketers globally.
‍
When a customer/client wants marketing services support, the team member will discuss their needs with them and connect them with an independent consultant who can meet their needs, preferably in their local timezone.  

Backkr holds no responsibility for the quality of the marketer's work, and the agreement, beyond the connection, is that between the client and the marketer.

2. Definitions
‍"Company" refers to , a company registered in .
‍"Client" refers to any individual or entity seeking marketing services through the Company's platform.
‍"Consultant" refers to an independent marketing professional connected with the Client through the Company's platform.
‍"Services" refers to the facilitation of connections between Clients and Consultants for marketing support.
‍"Platform" refers to the website and any associated applications or services provided by the Company.

3. Services
Provided by the Company
The Company's primary service is to facilitate the connection between Clients and Consultants.
This includes: Discussing Client needs to understand their marketing requirements.Identifying and recommending suitable independent Consultants based on Client needs and Consultant expertise.Providing a platform for initial communication and introduction between Clients and Consultants.The Company does not: Employ Consultants or act as an agent for Consultants.Supervise, direct, or control the work performed by Consultants.Guarantee the quality or outcome of the work performed by Consultants.Handle payments or contractual agreements between Clients and Consultants, only the initial connection.

4. Client Obligations
A. The Client agrees to:
1. Provide accurate and complete information regarding their marketing needs.
2. Conduct their own due diligence when selecting a Consultant.
3. Negotiate and enter into a separate agreement directly with the chosen Consultant for the provision of marketing services.
4. Be solely responsible for all payments and contractual obligations to the Consultant.
5. Indemnify and hold harmless the Company from any claims, damages, or liabilities arising from their engagement with a Consultant.

5. Consultant Obligations
A. Consultants connected through the Platform agree to:1. Maintain professional standards and provide services with due care and skill.

2. Accurately represent their qualifications, experience, and availability.

3. Enter into a direct agreement with the Client for the provision of services.

4. Be solely responsible for the quality and outcome of their work.

6. Disclaimers
THE COMPANY PROVIDES ITS SERVICES ON AN "AS IS" AND "AS AVAILABLE" BASIS, WITHOUT ANY WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. THE COMPANY DOES NOT WARRANT THAT THE SERVICES WILL BE UNINTERRUPTED, ERROR-FREE, OR SECURE.

7. Limitation of Liability
TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL THE COMPANY BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS OR REVENUES, WHETHER INCURRED DIRECTLY OR INDIRECTLY, OR ANY LOSS OF DATA, USE, GOODWILL, OR OTHER INTANGIBLE LOSSES, RESULTING FROM (A) YOUR ACCESS TO OR USE OF OR INABILITY TO ACCESS OR USE THE SERVICES; (B) ANY CONDUCT OR CONTENT OF ANY THIRD PARTY ON THE SERVICES, INCLUDING WITHOUT LIMITATION, ANY DEFAMATORY, OFFENSIVE, OR ILLEGAL CONDUCT OF OTHER USERS OR THIRD PARTIES; (C) ANY CONTENT OBTAINED FROM THE SERVICES; OR (D) UNAUTHORISED ACCESS, USE, OR ALTERATION OF YOUR TRANSMISSIONS OR CONTENT.

8. Intellectual Property
All intellectual property rights in the Platform and the Company's services, including but not limited to trademarks, copyrights, and software, are owned by or licensed to the Company.
You agree not to reproduce, distribute, modify, or create derivative works of any part of the Platform without the Company's prior written consent.

9. Confidentiality
Both the Company and the Client agree to keep confidential any non-public information disclosed by the other party during the course of using the Services. This obligation of confidentiality shall survive the termination of these terms and conditions.

10. Termination
The Company may terminate or suspend your access to the Services immediately, without prior notice or liability, for any reason whatsoever, including without limitation if you breach these Terms. Upon termination, your right to use the Services will immediately cease.

11. Governing Law
These Terms shall be governed and construed in accordance with the laws of , without regard to its conflict of law provisions.

12. Dispute Resolution
Any dispute arising out of or in connection with these Terms, including any question regarding its existence, validity, or termination, shall be referred to and finally resolved by arbitration in  in accordance with the Arbitration Act 1996.

13. Entire Agreement
These Terms constitute the entire agreement between you and the Company regarding our Services and supersede and replace any prior agreements we might have had between us regarding the Services.

14. Severability
If any provision of these Terms is held to be invalid or unenforceable by a court, the remaining provisions of these Terms will remain in effect.

15. Notices
Any notices or other communications provided by the Company under these Terms, including those regarding modifications to these Terms, will be given: (i) via email; or (ii) by posting to the Services.For notices made by email, the date of receipt will be deemed the date on which such notice is transmitted.


16. Force Majeure
Neither party shall be liable for any failure or delay in performing its obligations under these Terms if such failure or delay is caused by circumstances beyond its reasonable control, including but not limited to acts of God, war, terrorism, riots, embargoes, acts of civil or military authorities, fire, floods, accidents, strikes, or shortages of transportation, facilities, fuel, energy, labour, or materials.

17. Amendments
The Company reserves the right, at its sole discretion, to modify or replace these Terms at any time. If a revision is material, we will try to provide at least  days' notice prior to any new terms taking effect. What constitutes a material change will be determined at our sole discretion. By continuing to access or use our Services after those revisions become effective, you agree to be bound by the revised terms. If you do not agree to the new terms, please stop using the Services.

Contact Details
Please contact us on team@backkr.com
if you have any questions or concerns

Backkr Product
Terms and Conditions
Effective Date: 1st January 2025  
Last Updated: 17th November 2025
‍

These Terms and Conditions ("Terms") govern your use of https://www.backkr.com ("Site" or "Service"),
a SaaS platform owned and operated by Backkr Limited ("Backkr," "we," "us," or "our").

By using this Site, you confirm that you have read, understood, and agree to be bound by these Terms.

1. Service Description
Backkr provides a software-as-a-service (SaaS) platform that delivers:  
Customer Profile Analysis: AI-driven analysis of website visitors using Google Analytics 4 data
•⁠  ⁠Marketing Plan Generation: Automated creation of personalized marketing strategies and action plans
•⁠  ⁠Website Analysis Tools: Recommendations for improving website content, SEO, and conversion rates
•⁠  ⁠Content Generation: AI-assisted creation of marketing content tailored to your customer profiles
•⁠  ⁠Analytics Integration: Connection with Google Analytics 4 to extract behavioral insights

Our Service is delivered entirely online as subscription software.
We do *not* provide traditional consulting services, custom web development, or agency-managed campaigns.

2. Intellectual Property
All content, software, designs, text, graphics, logos, and other materials available on our Site are the exclusive property of Backkr and protected by copyright, trademark, and other intellectual property laws.
You may not copy, reproduce, distribute, modify, or create derivative works from our Service without express written permission.

3. Subscriptions and Billing
3.1 Subscription Plans
We offer monthly and annual subscription plans. Pricing and plan details are displayed on our pricing page at the time of purchase.
‍
3.2 Automatic Renewal
Your subscription automatically renews at the end of each billing period (monthly or annually) until you cancel. You will be charged automatically using your saved payment method.

3.3 Payment Processing
All payments are processed securely through Stripe. We accept major credit cards and debit cards via Stripe. We do *not* accept bank transfers or invoice-based payments.

3.4 Cancellation
You may cancel your subscription at any time through your account settings or by accessing the Stripe Customer Portal. Cancellations take effect at the end of your current billing period. You will retain access to the Service until that date.

3.5 Refunds
Subscription fees are non-refundable except where required by applicable consumer protection laws. If we cancel your order after processing payment, we will provide a full refund.

4. User Accounts and Data
4.1 Account Requirements
You must provide accurate, complete information when creating an account. You are responsible for maintaining the confidentiality of your account credentials.

4.2 Google Analytics Integration
Our Service requires connection to your Google Analytics 4 (GA4) property.
You grant us permission to access and analyze your GA4 data solely to provide our Service.
We do not share your analytics data with third parties except as necessary to deliver the Service (e.g., AI processing partners).
‍
4.3 Data Privacy
We collect and process personal data in accordance with our Privacy Policy. By using the Service, you consent to such processing.

4.4 Account Termination
We reserve the right to suspend or terminate your account if you breach these Terms or engage in fraudulent, abusive, or illegal activity.

5. AI-Generated
Content Disclaimer
Our Service uses artificial intelligence to generate marketing recommendations, content suggestions, and business insights.
While we strive for accuracy:⁠  ⁠No Guarantees: AI-generated content is provided "as is" without warranty of accuracy, completeness, or suitability for your specific business
Your Responsibility: You are solely responsible for reviewing, editing, and approving any AI-generated content before use
Not Professional Advice: Our Service does not constitute legal, financial, or professional business advice

6. Service Availability and Modifications

6.1 Uptime
We strive to maintain high availability but do not guarantee uninterrupted access to the Service. Scheduled maintenance and unforeseen outages may occur.

6.2 Changes to Service
We reserve the right to modify, update, or discontinue features of the Service at any time.
We will provide reasonable notice of material changes affecting your use.

7. Limitation of Liability
To the fullest extent permitted by law, Backkr and its directors, officers, employees, and affiliates shall not be liable for:
⁠Indirect, incidental, special, or consequential damages
Loss of profits, revenue, data, or business opportunities
Damages arising from your use or inability to use the Service
Reliance on AI-generated content or marketing recommendations
Our total liability for any claim shall not exceed the amount you paid for the Service in the 12 months preceding the claim.

8. Indemnification
You agree to indemnify and hold harmless Backkr from any claims, losses, damages, liabilities, and expenses (including legal fees) arising from:⁠  ⁠Your violation of these Terms
Your use of the Service
⁠Your violation of any third-party rights

9. Consumer Protection Law
Where consumer protection legislation in your jurisdiction applies and cannot be excluded, these Terms will not limit your legal rights and remedies under that legislation.
If there is a conflict between these Terms and mandatory consumer protection provisions, the mandatory provisions shall prevail.

10. Governing Law and Jurisdiction
These Terms are governed by the laws of New Zealand. Any disputes arising from these Terms or your use of the Service shall be subject to the exclusive jurisdiction of the courts of New Zealand.

11. Severability
If any provision of these Terms is found to be invalid or unenforceable, that provision shall be removed, and the remaining provisions shall continue in full force and effect.

12. Changes to These Terms
We may update these Terms from time to time to reflect changes in our Service, legal requirements, or business practices.
We will notify you of material changes via email or by posting a notice on the Site.
Continued use of the Service after changes constitutes acceptance of the updated Terms.

13. Contact Information
If you have questions or concerns about these Terms, please contact us: Backkr Limited
Email: team@backkr.com
Website: https://www.backkr.com
Effective Date: 1 August 2025  Last Updated: 17 November 2025
Backkr ("we," "our," or "us") is committed to protecting your privacy and handling your personal information responsibly.
This Privacy Policy explains how we collect, use, store, and safeguard your information when you use our marketing analytics platform.
‍
1. Information We Collect
We may collect the following personal and business information:
Personal and Contact Information
  Your name, email address, and any other contact details you provide  
Authentication information managed through our third-party authentication service provider
‍
Account Information
  Login credentials, subscription details, and account preferences  
Authentication tokens stored in secure, http Only cookies
Business Information
  Company name, website URL, and business details you choose to share  
Industry type, products and services offered, and marketing goals   Business tone and messaging preferences from your onboarding responses
‍
Technical Data
  IP address for region detection and pricing localization  
Browser cookies (authentication and session management)  
Browser local storage for preserving signup progress  
Device type, browser type, and operating system information
‍
Communication Data
  Records of your interactions with our platform and support team
Google Analytics and Google Search Console Data
When you connect your accounts, we collect data via the Google Analytics and Google Search Console APIs, including:
Core Metrics: Active users, sessions, page views, conversions, transactions, and revenue
Engagement Metrics: Session duration, bounce rate, engaged sessions, event counts
Detailed Analytics: Geographic location (country/region), traffic sources, campaigns, devices, browser/OS preferences, landing pages, page paths, content engagement
E-commerce Data: Purchases, categories, items, and transaction details
Demographics & Ads Data: Age ranges, gender, and keyword queries (where available)
Temporal Patterns: Usage by time of day and day of week
‍
Website Content
To understand your brand and context, we analyze publicly available content from your website, including:
  Page text, meta descriptions, and titles  
Page structure and calls-to-action  
Forms and conversion elements
We only analyze publicly available information accessible to any internet user.
‍
2. How We Use Your Information
Our primary purpose is to generate personalized marketing strategies and insights.
Specifically, we use your information to:
  Analyze your Google Analytics data to identify patterns and opportunities  
Generate customized strategy recommendations in your Backkr dashboard  
Produce reports and performance visualizations  
Suggest marketing content and SEO improvements based on website analysis  
Process payments and manage subscriptions   Authenticate your account and maintain secure access  
Detect your geographic region for appropriate pricing  
Send service-related communications and support responses
To create marketing content and SEO recommendations:
  Backkr scans your public-facing website to understand your brand  
This information, along with any content you choose to type in, may be sent to third-party AI tools to help generate relevant content  
The data shared includes information you provide and publicly available website content
‍
3. AI-Powered Insights
We use third-party AI services to generate marketing recommendations and content.

What Data is Shared with AI Services:
  Aggregated Google Analytics metrics and behavioral patterns (user counts, session metrics, conversion rates, engagement data)  
Your website URL, business name, and industry - These are shared to provide context for personalized recommendations  
Publicly scraped website content including page text, headings, and calls-to-action  
Geographic data at country/region level (not individual user addresses)  
Business information you provide during onboarding (products, services, goals, tone preferences)

Important Clarifications:
  Individual user-level session data (specific visitor identities) is NOT shared  
Your website URL and business name ARE shared with AI services as necessary context  
Only aggregated, summarized analytics data is processed by AI tools  
Raw Google Analytics API responses are never directly transmitted to AI services

AI Data Handling
  No training use: Third-party AI services claim to not use your data to train their models  
Data deletion: AI services delete processed data within 30 days per their policies  
No direct raw data transfers: Original Google Analytics data never leaves our secure systems without aggregation
‍
4. Data Sharing
We do not sell, rent, or trade your personal information.
Data is shared only in the following limited cases:

With Trusted Service Providers:
We work with carefully selected third-party service providers to deliver our services:
  Authentication Services: For secure user login and account management  
Payment Processors: For subscription billing and payment handling  
AI Services: For generating marketing insights and content recommendations  
Email Services: For transactional emails and marketing communications (if you opt in)  
Cloud Hosting and Infrastructure: For secure data storage and platform operations  
‍
Analytics API Providers (Google): For accessing your Google Analytics and Search Console data
These service providers are contractually obligated to protect your data and use it only for the purposes we specify.
When Required by Law: To comply with legal obligations, protect rights and safety, or respond to valid legal requests
Google API Services Compliance
Backkr's use and transfer of information received from Google APIs adheres to the [Google API Services User Data Policy](https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

Specifically regarding Google data:
  Access tokens are stored securely with encryption and refreshed automatically  
OAuth refresh tokens are stored in our database and expire after 30 days maximum  
Google data is only accessed when you actively use our service  
You can revoke Backkr's access at any time through your [Google Account settings](https://myaccount.google.com/permissions) or your Backkr dashboard
‍
5. Data Retention and Deletion
Google Analytics data: Retained for up to 3 years to enable historical trend analysis
User account data: Retained until account deletion or 2 years of continuous inactivity
AI-generated insights: Retained for 12 months
Website content analysis: Retained for 6 months or until updated
Authentication tokens: OAuth tokens expire and are automatically deleted after 30 days
Retention Enforcement: Retention periods are enforced through periodic automated data purges and manual reviews.

Deletion Rights
  You may request deletion at any time through your account settings or by contacting us   Upon account deletion, all associated data is permanently deleted within 30 days   Consent for AI processing can be withdrawn at any time (though previously processed data cannot be reversed)   You can disconnect Google Analytics and Google Search Console accounts at any time
‍
6. Data Security
While no system can be guaranteed to be completely secure, Backkr is committed to maintaining industry best practices to protect your information.
Safeguards in Place
Access Controls: Only authorized staff have access to personal information, protected by role-based permissions and multi-factor authentication
Data Minimization & Retention: We only collect the information necessary to deliver our services, and securely delete or anonymize data once no longer required
Monitoring & Auditing: Our systems are regularly reviewed to identify vulnerabilities and prevent unauthorized access or misuse
Secure Infrastructure: We use trusted hosting and storage providers that comply with international standards (ISO 27001, SOC 2)
Encryption: Data is encrypted in transit (TLS/HTTPS) and at rest where applicable
Incident Response: In the event of a suspected data breach, we promptly investigate, mitigate risks, and notify affected users and regulators as legally required
‍
Cookies
We use the following cookies:
Authentication cookies (httpOnly, secure): For maintaining your login session and security
OAuth tokens (httpOnly, secure): For Google Analytics API access (expires in 30 days maximum)
Session data: For preserving your signup progress and user preferences
You can control cookies through your browser settings, but disabling them will prevent you from using core features of our service.
‍
7. Your Rights
You have the right to:
  Access the personal information we hold about you  
Request corrections or updates to your information  
Request deletion or data portability  
Withdraw consent for AI processing  
Object to processing of your data  
Lodge a complaint with a supervisory authority
‍
Account Management
  Update account details in your Backkr dashboard  
Disconnect Google Analytics and Google Search Console accounts at any time  
Revoke Google access through your Google Account permissions  
Cancel your account (triggers full data deletion within 30 days)
‍
8. Legal Basis for Processing
By creating an account and connecting your Google Analytics, you agree that:
  Backkr may access and process your Google Analytics and Google Search Console data  
Aggregated analytics data, along with your website URL and business context, may be shared with AI services for strategy generation   Publicly available website content will be analyzed to provide recommendations  
Your data will be handled according to this Privacy Policy
You maintain the right to disconnect your accounts and request data deletion  at any time through your dashboard or by contacting [team@backkr.com](mailto:team@backkr.com)
‍
9. International Data Transfers
Your data may be processed and stored outside your country of residence.
When we transfer data internationally, we use appropriate safeguards such as:
  Standard contractual clauses approved by relevant authorities  
Ensuring third-party processors maintain adequate data protection standards  
Compliance with applicable data protection frameworks (GDPR, CCPA, etc.)
‍
10. Policy Updates
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements.
  The "Last Updated" date will always reflect the current version  
Material changes will be communicated through our platform, email, or prominent notice  
Continued use of our services after changes indicates acceptance of the updated policy  
For significant changes, we may require renewed consent
‍
11. Additional Disclosures
Children's Privacy
Our services are not intended for individuals under 18. We do not knowingly collect data from children.
If we become aware that we have collected data from a child, we will delete it promptly.
‍
Business Transfers
In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity. The new entity will be bound by the same privacy protections, and you will be notified of any such transfer.
‍
Legal Disclaimer
While we apply industry-standard security measures, no system is 100% secure. By using Backkr, you acknowledge and accept this inherent risk. We will notify you promptly of any data breaches as required by law.
‍
Data Processing
For users in the European Economic Area (EEA), UK, or Switzerland: Backkr acts as a data controller for your account information and a data processor for your Google Analytics data.
You (the account holder) remain the data controller for your Google Analytics data.
‍
12. Contact Us
For questions, requests, concerns, or to exercise your data rights, please contact:
Email: [team@backkr.com](mailto:team@backkr.com)  
Phone: +64 27 766 4199  
Address: Ministry of Awesome, Christchurch, New Zealand
For Data Subject Requests:  Please include "Privacy Request" in your email subject line and provide:
  Your full name and account email