Backed LogoBacked
Log inSign up
Back to Home

Privacy Policy

Last updated: January 7, 2026

1. Introduction

This Privacy Policy explains how Backed ("we", "us", or "our"), operated by Phico, collects, uses, discloses, and protects your personal information when you use our platform. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

By using Backed, you agree to the collection and use of information in accordance with this policy.

2. Data Controller

The data controller responsible for your personal information is:

3. Information We Collect

3.1 Information You Provide

We collect information that you voluntarily provide when using our Platform:

  • Account Information: Email address, handle (username), name
  • Profile Information: Avatar, headline, role type, bio, location, website URL, LinkedIn URL, skills
  • Authentication Information: Google account ID (if using Google OAuth)
  • Backs (Recommendations): Relationship description, collaboration dates (start and end), rating (positive, neutral, or negative), recommendation text, skills endorsed
  • Reports: Reason for report and description

3.2 Information We Collect Automatically

When you use our Platform, we automatically collect certain information:

  • Usage Data: Pages visited, features used, time spent on pages, navigation paths (via Google Analytics)
  • Device Information: Browser type, operating system, device type
  • Log Data: IP address, access times, pages requested

3.3 Cookies and Similar Technologies

We use cookies and similar tracking technologies to:

  • Maintain your session and keep you logged in
  • Remember your preferences (e.g., dark mode)
  • Analyze site usage and improve our services (via Google Analytics)

You can control cookie preferences through your browser settings. However, disabling certain cookies may limit your ability to use some features of the Platform.

4. How We Use Your Information

We use your personal information for the following purposes:

  • Providing Services: To create and maintain your account, display your profile, and enable you to create and receive Backs
  • Authentication: To verify your identity and secure your account
  • Platform Improvement: To understand how users interact with our Platform and improve functionality
  • Communication: To send you important updates about your account, changes to our policies, or responses to your inquiries
  • Moderation: To review reported content and enforce our Terms of Service
  • Legal Compliance: To comply with applicable laws and regulations
  • Analytics: To analyze usage patterns and trends (via Google Analytics)

5. Legal Basis for Processing (GDPR)

Under the GDPR, we process your personal data based on the following legal grounds:

  • Contractual Necessity: Processing is necessary to provide our services to you (e.g., creating your account, displaying your profile)
  • Legitimate Interest: We have a legitimate interest in improving our Platform, preventing fraud, and ensuring security
  • Consent: Where required by law, we obtain your consent before processing certain data (e.g., analytics cookies)
  • Legal Obligation: Processing is necessary to comply with legal obligations

6. How We Share Your Information

6.1 Public Information

By design, Backed is a public platform. The following information is publicly visible to all users and visitors:

  • Your profile information (name, avatar, headline, role type, bio, location, website, LinkedIn URL, skills)
  • Backs you have written (including your name and profile as the author)
  • Backs written about you (including the author's name and profile)

6.2 Service Providers

We share your information with third-party service providers who help us operate the Platform:

  • Google Cloud Platform: For hosting, data storage (Google Cloud SQL in Europe), and infrastructure
  • Google Analytics: For usage analytics and insights
  • Google OAuth: For authentication services

These providers are contractually obligated to protect your data and use it only for the purposes we specify.

6.3 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to:

  • Comply with legal obligations
  • Protect our rights, property, or safety
  • Prevent fraud or illegal activity
  • Protect the rights, property, or safety of our users or the public

6.4 Business Transfers

If Backed is involved in a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any such change and provide choices regarding your information.

7. Data Storage and Security

7.1 Data Location

Your personal data is stored on Google Cloud SQL servers located in Europe. We use industry-standard security measures to protect your information from unauthorized access, disclosure, alteration, or destruction.

7.2 Security Measures

We implement appropriate technical and organizational measures to protect your data, including:

  • Encryption of data in transit (HTTPS/TLS)
  • Encryption of data at rest
  • Regular security audits and updates
  • Access controls and authentication
  • Secure session management

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

7.3 Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete your personal data within 30 days, except where:

  • We are required by law to retain certain information
  • The information is necessary to resolve disputes or enforce our agreements
  • Anonymous or aggregated data is retained for analytics purposes

8. Your Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

  • Right of Access: You can request a copy of the personal data we hold about you
  • Right to Rectification: You can update or correct your personal information through your account settings
  • Right to Erasure ("Right to be Forgotten"): You can request deletion of your personal data by deleting your account or contacting us
  • Right to Restriction of Processing: You can request that we limit how we use your data
  • Right to Data Portability: You can request a copy of your data in a structured, machine-readable format
  • Right to Object: You can object to our processing of your data based on legitimate interests
  • Right to Withdraw Consent: Where we rely on consent, you can withdraw it at any time
  • Right to Lodge a Complaint: You can file a complaint with your local data protection authority

To exercise any of these rights, please contact us at privacy@backed.page. We will respond to your request within 30 days.

9. Children's Privacy

Backed is not intended for individuals under 18 years of age. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected personal data from someone under 18, we will take steps to delete that information.

10. International Data Transfers

While our servers are located in Europe, Backed is accessible worldwide. If you access our Platform from outside the European Economic Area (EEA), your information may be transferred to, stored, and processed in the EEA.

We ensure that any international data transfers comply with GDPR requirements through:

  • Use of standard contractual clauses approved by the European Commission
  • Ensuring adequate safeguards are in place
  • Relying on data centers within the EEA

11. Third-Party Links

Our Platform may contain links to third-party websites (e.g., LinkedIn profiles, personal websites). We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. If we make material changes, we will notify you by email or by posting a prominent notice on our Platform.

Your continued use of the Platform after such changes constitutes your acceptance of the updated Privacy Policy.

13. Data Protection Officer

For questions about this Privacy Policy or how we handle your personal data, you can contact our Data Protection Officer at:

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

15. Specific Data Processing Activities

15.1 Google OAuth

When you sign in with Google, we receive:

  • Your Google account ID (for authentication)
  • Your email address
  • Your name (if you choose to share it)

We do not access or store your Google password. Your use of Google OAuth is subject to Google's Privacy Policy.

15.2 Google Analytics

We use Google Analytics to understand how users interact with our Platform. Google Analytics collects information such as:

  • Pages visited and time spent
  • Browser and device type
  • Geographic location (country/city level)
  • Referral sources

Google Analytics uses cookies and may combine this information with other data Google has collected. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

15.3 Session Cookies

We use session cookies to maintain your login state and preferences. These cookies are essential for the Platform to function properly and are deleted when you log out or close your browser.

16. Your Choices

You have choices regarding your personal information:

  • Profile Visibility: By using Backed, you agree that your profile and Backs are public. If you wish to limit visibility, you may delete your account.
  • Email Communications: You can opt out of non-essential emails by adjusting your account settings or clicking unsubscribe in our emails.
  • Cookies: You can control cookies through your browser settings. Note that disabling cookies may affect Platform functionality.
  • Account Deletion: You can delete your account at any time through your settings or by contacting support@backed.page. Your data will be deleted within 30 days.

By using Backed, you acknowledge that you have read, understood, and agree to this Privacy Policy.

For more information about your legal rights and our terms, please review our Terms of Service.