Privacy Policy

We collect information you provide directly when creating an account or using Backhouse:

• Account information: Name, email address, phone number, and password when you sign up or invite team members.
• Venue and business data: Venue name, location, operating hours, and business configuration you enter into the platform.
• Staff and HR data: Employee names, roles, contact details, scheduling information, tip records, and payroll data you manage through the platform.
• Usage data: Log data including pages visited, features used, timestamps, and browser/device information collected automatically when you use the Service.
• Payment information: Billing details processed through our payment provider. We do not store full card numbers on our servers.

We use the information we collect to operate, maintain, and improve the Backhouse platform. Specifically, we use it to:

• Create and manage your account and venue workspace.
• Provide core features: scheduling, tip management, payroll reporting, inventory tracking, and team communications.
• Process subscription payments and send billing-related communications.
• Send transactional emails such as account confirmations, schedule notifications, and time-off alerts.
• Diagnose technical issues and improve platform reliability and performance.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information or use it for third-party advertising.

To deliver the Service, we share certain data with trusted third-party providers who process it on our behalf:

• Supabase — our database and authentication infrastructure. Your account data, venue data, staff records, and all platform content are stored in Supabase-managed databases hosted on AWS.
• Stripe — our payment processor. Billing information including card details and subscription status are handled by Stripe. Stripe's privacy policy governs how they process payment data.
• Resend — our transactional email provider. Email addresses are shared with Resend solely to deliver platform notifications such as schedule updates and account communications.

Each of these providers is bound by their own privacy policies and data processing agreements. We do not authorize them to use your data for their own marketing purposes.

We retain your data for as long as your account is active or as needed to provide the Service. Specifically:

• Active account data is retained for the duration of your subscription.
• After account cancellation, we retain your data for up to 30 days during which you may request a full export.
• After the 30-day window, your data is deleted from our production systems. Encrypted backups may persist for up to 90 days before being purged.
• Some data may be retained longer where required by law (for example, financial records for tax compliance).

You can request deletion of your account and associated data at any time by contacting us at support@backhouse.app.

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete data.
• Deletion: Request that we delete your personal data, subject to legal retention requirements.
• Portability: Request an export of your data in a machine-readable format.
• Objection: Object to certain types of processing, including for direct marketing purposes.

To exercise any of these rights, contact us at support@backhouse.app. We will respond within 30 days. We may need to verify your identity before fulfilling a request.

We implement industry-standard technical and organizational measures to protect your information, including:

• Encryption of data in transit (TLS) and at rest.
• Role-based access controls limiting who can access production data.
• Authentication controls including secure password hashing and session management.

No method of electronic transmission or storage is completely secure. While we work hard to protect your information, we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately at support@backhouse.app.

If you have questions about this Privacy Policy or how we handle your data, please contact us:

We will make reasonable efforts to respond to privacy inquiries within two (2) business days.