Privacy Policy

Who We Are

Backenly operates the backenly.com platform, an autonomous backend platform for developers and product teams. This Privacy Policy explains how we collect, use, store, and protect personal information when you use our website and services.

Information We Collect

We collect the following categories of information:

How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Backenly platform
• Authenticate identity and secure accounts
• Process payments and manage subscriptions
• Generate backend configurations based on your instructions
• Send transactional emails and important notices
• Respond to support requests and resolve issues
• Analyze aggregate usage trends and prevent abuse
• Comply with legal obligations

We do not use your data to train AI models without explicit consent. Project data is used only to provide the Service to you.

Multi-Tenant Data Isolation

Backenly is architected with strong data isolation. Each project runs in a dedicated PostgreSQL schema named workspace_{projectId}. This means:

• Project data is not stored in shared customer tables
• End users of your application are separate from platform users
• AI queries are scoped to your project only
• Cross-tenant data access is prevented by design

Data Storage and Security

We implement security controls including:

• TLS encryption for data in transit
• API keys hashed before storage
• Passwords hashed with bcrypt
• Project-scoped JWT secrets
• Restricted production access
• Regular security reviews and dependency updates

Our infrastructure is hosted on Hetzner. We do not store data in the United States.

Data Sharing and Third Parties

We do not sell personal information. We share data only in limited circumstances:

• Paddle for payment processing
• OpenAI for AI backend generation requests
• Hetzner for infrastructure hosting
• Legal compliance when required by law or court order
• Business transfers with appropriate notice

We require third-party processors to maintain appropriate data protection standards.

Cookies and Tracking

We use minimal cookies and similar technologies:

• Session cookies to keep you logged in
• Preference cookies to remember UI settings
• Privacy-respecting analytics for aggregate usage patterns

We do not use third-party advertising cookies or tracking pixels. Disabling cookies may affect core product features.

Data Retention

We retain your data according to the following rules:

• Active account data is retained while the account exists
• Cancelled account data is retained for 30 days before deletion
• AI conversation history is retained for the lifetime of the project
• Billing records are retained for seven years
• Logs and diagnostics are retained for up to 90 days

Your Rights

Depending on your location, you may have rights to access, correct, delete, export, restrict, or object to processing of your personal data.

To exercise these rights, contact support@backenly.com. We will respond within 30 days.

Children's Privacy

Backenly is not intended for users under 16 years of age. We do not knowingly collect personal information from children under 16.

Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by email or a prominent notice within the Service.

Contact Us

If you have questions, concerns, or requests related to this Privacy Policy, contact support@backenly.com.