Data Policy

• Your data is stored on Google Cloud and encrypted in transit and at rest.
• We do not sell your data or share it with advertisers.
• We do not use your content to train AI models, ours or any provider's.
• You can delete your data at any time, or ask us to delete your entire account.

Backbond is operated by Optagon Labs. This policy explains what we do with your information when you use Backbond and the choices you have. Read it together with our Terms of Service.

We collect the following:

• Account information. When you sign in with Google, we receive your name, email address, and profile picture. We do not receive your Google password; Google verifies it and confirms your identity to us.
• Content you create. Your projects, uploaded documents and papers, chats and questions, notes, and saved formulations.
• Operational data. Logs and event records, device and browser details, IP address, timestamps, and usage and cost totals.
• Billing information. Stripe processes payments. We store a reference to your account and plan status, not your full card number.

We use this information to:

• Operate and improve Backbond.
• Sign you in and keep your account secure.
• Turn your documents into your knowledge graph and produce the analysis you request.
• Process payments and manage your subscription.
• Detect and prevent abuse, security issues, and bugs.
• Respond to your support requests.
• Meet our legal obligations.

When you ask a question, Backbond sends the parts of your content required to answer it to the providers that run the language models and generate the embeddings behind your results. This is necessary for the product to produce results.

We do not train our own AI models on your content. The providers do not train their models on it. Our model provider does not train on data sent through its commercial API. Your content remains yours.

Your account, projects, uploaded documents, chat history, and saved formulations are stored on Google Cloud, the same infrastructure Google uses for its own products. Records and files are stored in Google Cloud SQL, in data centers with strict physical and access controls.

If you connect Google Drive or Microsoft SharePoint and link a folder, those files stay on Drive or SharePoint. We read them only while analyzing them, and we do not store them in our database.

Data is encrypted in transit with TLS, the same HTTPS used by banks, and encrypted at rest. Internal access is limited to staff who need it to operate the Service.

No online service can guarantee perfect security. We use current, industry-standard safeguards to protect your data.

The following providers process data on our behalf, only to provide the Service, under contracts that require them to protect it:

• Google Cloud, for hosting, the database, and compute.
• Anthropic, for the language model that generates the analysis.
• Providers that convert documents into text and embeddings for analysis.
• Stripe, for processing payments.
• Google and Microsoft, only if you connect Google Drive or Microsoft SharePoint to import your own files.

We do not sell your personal information. We share it only in these cases:

• With the providers listed above.
• With your organization's administrators, if you belong to an organization, who can see activity and content within that organization.
• When required by law or a valid legal request, or to protect people, rights, and the Service.
• In connection with a merger or acquisition, in which case we will notify you.

We keep your information for as long as your account is open, or as long as we need it to operate the Service. When you delete something, it is removed from live storage and then cycles out of backups over time. We keep some information longer only where required, for example for tax, accounting, or legal reasons, or to resolve a dispute.

You can delete any file, chat, note, or formulation from within the app, which removes it from storage. To delete your entire account, email us. Depending on where you live, you may have the right to access, correct, export, or delete your personal data, or to object to its use. Contact us to exercise these rights.

We use only the cookies and local storage required to sign you in and keep the app working, along with our own analytics to measure and improve the product. We do not use third-party ad networks and do not track you across other websites.

We and our providers may store and process your data in the United States and in other countries where they operate. Wherever it goes, we protect it the same way this policy describes.

Backbond isn't meant for anyone under 18, and we don't knowingly collect data from children.

We may update this policy. When we make a material change, we will update the version and effective date and ask you to review it again the next time you open Backbond.

For questions about this policy, or to request a copy of the data we hold about you, email us at support@backbond.net.