Privacy Policy

This Privacy Policy (the “Policy”) describes how Backstage (“Backstage”, “we”, “us” or “our”) collects, uses, shares, retains, and protects information when you (“you” or the “Customer”) access or use the Backstage software, websites, applications, application programming interfaces, and related products and services (each, a “Service”, and collectively, the “Services”).

This Policy is incorporated by reference into our Terms of Service. Capitalized terms used but not defined here have the meanings given in the Terms of Service. By accessing or using the Services, you acknowledge that you have read and understood this Policy. If you do not agree with this Policy, you must not access or use the Services.

1. Scope and Roles

This Policy applies to information processed in connection with the Services, including information you provide directly, information generated through your use of the Services, and information we receive from Third-Party Platforms you authorize us to access. With respect to personal data that you submit, upload, or otherwise direct us to process on your behalf through the Services (the “Submitted Data”), you act as the data controller (or business) and we act as a data processor (or service provider) processing the Submitted Data only on your documented instructions. With respect to information we collect about you in connection with your account and your use of the Services (the “Account Data”), we act as a data controller (or business).

2. Information We Collect

2.1 Information you provide.

When you create an account, join the waitlist, contact us, or purchase a subscription, we collect the information you submit, which may include your name, email address, password, billing-related information, payment-method identifiers, and any other information you choose to provide. Payment-card data is handled by our third-party payment processor and is not stored on our systems in plaintext.

2.2 Submitted Data.

The Services are designed to process content you choose to submit, including video and audio recordings, transcripts, captions, images, text, prompts, project files, channel and community metadata, viewer comments, drafts, notes, and any other Customer Content. Submitted Data may include personal data of third parties (such as individuals appearing on camera, commenters, or community members) where you have a lawful basis to submit it.

2.3 Information from Third-Party Platforms.

When you authorize a connection between the Services and a Third-Party Platform, we receive the information that the Third-Party Platform makes available to us under the permissions you grant. Depending on the connection, this may include profile and account identifiers, channel or community metadata, public and private content authored on the platform, analytics and audience metrics, message or comment streams, and access tokens that allow us to perform actions you direct. We use information from Third-Party Platforms only as necessary to provide the Services to you and in accordance with the authorizations you grant.

2.4 Usage and device information.

When you access the Services, we automatically collect limited technical information about your device and your interaction with the Services, including your device type, operating system, application version, language, time zone, IP address, approximate location derived from network address, log timestamps, error reports, performance metrics, and the features you use. We use this information to operate, secure, troubleshoot, and improve the Services.

2.5 Cookies and similar technologies.

Our websites use cookies and similar technologies to remember your preferences, authenticate sessions, measure traffic, and improve our marketing. You may control cookies through your browser settings; disabling certain cookies may affect the availability or functionality of parts of our Services.

2.6 Communications.

If you correspond with us by email, support form, or other means, we will retain those communications and any accompanying attachments to respond to your request and to maintain a record of our interactions.

2.7 No knowing collection from children.

The Services are not directed to, and we do not knowingly collect personal data from, individuals under the age of eighteen (18) (or the age of legal majority in your jurisdiction, if higher). If you become aware that a minor has provided personal data to us, please contact us so we can delete it.

3. How We Use Information

We use the information we collect for the following purposes:

• To provide the Services. To create and maintain your account, authenticate you, deliver the features you request (including AI-assisted editing, transcription, summarization, scoring, drafting, publishing assistance, and community management), respond to your prompts, and enable integrations with Third-Party Platforms you connect.
• To process transactions. To meter usage, calculate Credits, charge fees, issue invoices and receipts, and prevent fraudulent transactions.
• To secure and maintain the Services. To monitor for, investigate, and prevent abuse, fraud, unauthorized access, security incidents, and violations of our Terms of Service or applicable law; to enforce limits and policies; and to back up and restore data.
• To improve the Services. To analyze aggregated and de-identified usage patterns, diagnose errors, measure feature performance, and develop new features. We do not use Submitted Data to train general-purpose machine learning models that we make available to other customers, and we contractually require our subprocessors that provide model-inference services not to do so either, except where you have explicitly opted in.
• To communicate with you. To send you transactional messages (such as service notices, billing notifications, security alerts, and changes to our terms or policies), to respond to your inquiries, and, where permitted by law, to send you product updates, marketing messages, and other communications that you may opt out of at any time.
• To comply with law and protect rights. To comply with applicable laws, regulations, and legal process, and to establish, exercise, or defend legal claims and protect the rights, property, or safety of us, our users, or third parties.

4. Legal Bases for Processing

Where applicable law (including the European Economic Area, United Kingdom, or Switzerland data protection laws) requires a legal basis for processing personal data, we rely on:

• Performance of a contract to provide the Services and fulfill our obligations to you;
• Legitimate interests in operating, securing, maintaining, and improving the Services and our business, provided that those interests are not overridden by your rights and freedoms;
• Compliance with legal obligations that apply to us; and
• Your consent, where consent is the applicable basis (for example, certain optional communications), which you may withdraw at any time without affecting the lawfulness of processing carried out before withdrawal.

5. How We Share Information

We do not sell or rent your personal data. We disclose information only as described below.

5.1 Service providers and subprocessors.

We engage carefully selected third-party service providers that help us operate the Services, including providers of cloud hosting and storage, database and authentication infrastructure, content delivery, payment processing, error and product analytics, customer-support tooling, email delivery, and the machine learning model-inference and transcription services that power the AI-assisted features. These service providers process information on our behalf under written contracts that restrict their use of the information to the purposes for which they were engaged and require them to maintain reasonable safeguards. A current list of categories of subprocessors is available on request.

5.2 Third-Party Platforms you authorize.

When you direct the Services to interact with a Third-Party Platform you have connected, we transmit data to and receive data from that Third-Party Platform as necessary to perform the action you have requested. Information you submit through the Services to a Third-Party Platform is thereafter governed by that platform’s own privacy policy and practices, and we do not control how the Third-Party Platform handles it.

5.3 Affiliates and successors.

We may share information with our corporate affiliates for the purposes described in this Policy. If we are involved in a merger, acquisition, financing, reorganization, sale of assets, or insolvency, your information may be transferred or disclosed in connection with that transaction, subject to this Policy or a successor policy that is no less protective.

5.4 Legal and safety disclosures.

We may disclose information when we believe in good faith that disclosure is necessary or appropriate to comply with applicable law or legal process, to respond to lawful requests from public authorities, to enforce our Terms of Service, to detect, prevent, or address fraud, security, or technical issues, or to protect the rights, property, or safety of us, our users, or others.

5.5 With your consent.

We may share information for any other purpose disclosed to you and pursuant to your consent.

6. International Data Transfers

We are based in, and our service providers may be located in, countries other than the country in which you reside. By using the Services, you understand that your information may be transferred to, processed in, and stored in countries whose data protection laws may differ from those of your country. Where required by applicable law, we use appropriate transfer mechanisms, such as standard contractual clauses or equivalent safeguards, to protect cross-border transfers of personal data.

7. Data Retention

We retain Submitted Data and Account Data for as long as necessary to provide the Services to you, comply with our legal obligations, resolve disputes, and enforce our agreements. You may delete most Customer Content from within the Services at any time. When you terminate your account, we will delete or de-identify your Customer Content and Account Data within a commercially reasonable period thereafter, subject to (a) data we are required to retain to comply with legal, tax, accounting, audit, or recordkeeping obligations; (b) information retained in routine backups, which is purged on a rolling schedule; and (c) information retained in aggregated or de-identified form that can no longer reasonably be associated with you.

8. Security

We implement and maintain administrative, technical, and organizational measures designed to protect information against unauthorized access, disclosure, alteration, loss, and destruction. These measures include encryption of data in transit, access controls, segregation of environments, logging and monitoring, and personnel training. No system is perfectly secure, however, and we cannot guarantee the absolute security of any information transmitted to or stored by the Services. You are responsible for maintaining the confidentiality of your account credentials and for notifying us promptly of any suspected unauthorized access.

9. Your Rights and Choices

Depending on your jurisdiction and applicable law, you may have certain rights with respect to your personal data, including the rights to:

• access or receive a copy of personal data we hold about you;
• correct inaccurate or incomplete personal data;
• delete personal data, subject to applicable exceptions and our retention obligations;
• restrict or object to certain processing, including processing based on legitimate interests and processing for direct-marketing purposes;
• data portability, where applicable, including the right to receive your personal data in a structured, commonly used, machine-readable format;
• withdraw consent at any time where processing is based on consent; and
• lodge a complaint with a competent data protection supervisory authority.

To exercise any of these rights, contact us at hi@withbackstage.com. We will verify your request and respond within the timeframe required by applicable law. If you are submitting Submitted Data on behalf of others, please direct rights requests from those individuals to you, the controller of that data, in accordance with our role as your processor.

You may also opt out of marketing email at any time by following the unsubscribe link in those messages or by contacting us. Transactional and account-related messages cannot be opted out of while you maintain an account.

10. Notice to U.S. Residents

Some U.S. state laws (including those of California, Colorado, Connecticut, Utah, Virginia, and other states with comparable laws) afford residents specific rights regarding their personal information. We do not sell personal information for monetary consideration and we do not share personal information for cross-context behavioral advertising. Where applicable, you have the rights described in Section 9 above and the right not to be discriminated against for exercising them. You may designate an authorized agent to make a request on your behalf, subject to verification.

11. Automated Decision-Making

The Services use automated processing to generate Output and to score, rank, summarize, or otherwise evaluate Customer Content at your direction. These automated outputs are probabilistic suggestions, are reviewed and acted upon by you, and are not used by us to make decisions producing legal or similarly significant effects on individuals.

12. Third-Party Links and Content

The Services may include links to, or embedded content from, third-party websites, applications, or services that are not operated by us. We are not responsible for the privacy practices or content of those third parties, and we encourage you to read their privacy policies before providing them with information.

13. Changes to this Policy

We may update this Policy from time to time. If we make a material change, we will provide reasonable advance notice (for example, by posting an updated effective date, sending email, or notifying you within the Services). The updated Policy will take effect on the effective date stated in the notice. Your continued access to or use of the Services after the effective date constitutes your acceptance of the updated Policy.

14. Contact

If you have questions about this Policy or our privacy practices, or wish to exercise any of your rights, please contact us at hi@withbackstage.com.