Privacy Policy

Last updated: Last updated: May 3, 2026

This Privacy Policy explains how Backra AI ("Backra", "we", "us", or "our") collects, uses, and protects information when you use our website and services (the "Service").

1. Information We Collect

Information you provide

  • Account information: name, email address, password (hashed).
  • Payment information: processed by Stripe; we do not store full card details.
  • Uploaded images and any custom prompts you provide.
  • Communications you send us (e.g., support requests).

Information collected automatically

  • Usage data: pages visited, features used, timestamps.
  • Device and browser information: IP address, user agent, language.
  • Cookies and similar technologies (see Section 6).

2. How We Use Information

  • To provide and operate the Service (process images, manage credits, deliver outputs).
  • To process payments and send purchase confirmations.
  • To communicate with you about your account, updates, and support.
  • To improve the Service, including debugging and analytics.
  • To detect and prevent fraud, abuse, and security incidents.
  • To comply with legal obligations.

3. Legal Bases (GDPR)

If you are in the European Economic Area (EEA), we process your personal data on the following legal bases: performance of a contract (to provide the Service), legitimate interests (to improve and secure the Service), consent (for optional cookies and marketing), and legal obligations.

4. Sharing Information

We share information only as follows:

  • Service providers: AI processing providers (e.g., Kie.ai, OpenAI), payment processors (Stripe), hosting (Railway), email providers, and analytics tools — only as needed to operate the Service.
  • Legal compliance: when required by law, court order, or to protect rights, property, or safety.
  • Business transfers: in connection with a merger, acquisition, or sale of assets.

We do not sell your personal information.

5. Image Processing and Retention

  • Uploaded images and generated outputs are stored to deliver the Service to you.
  • Images are retained for a default period of 12 days, after which they may be deleted from active storage.
  • Uploaded images may be transmitted to third-party AI providers solely for the purpose of generating outputs. We do not authorize those providers to train models on your images.
  • You may delete your images at any time by deleting the corresponding tasks from your dashboard.

6. Cookies

We use cookies and similar technologies for essential functionality (authentication, session management) and analytics. You can control cookies through your browser settings. Disabling essential cookies may impair the Service.

7. Data Security

We use industry-standard measures to protect your data, including encryption in transit (HTTPS), hashed passwords, and access controls. No system is perfectly secure, but we work to safeguard your information.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you;
  • Correct inaccurate data;
  • Delete your data (subject to legal retention requirements);
  • Restrict or object to certain processing;
  • Data portability;
  • Withdraw consent (where processing is based on consent);
  • Lodge a complaint with a data protection authority.

To exercise these rights, contact us at backrapersonal@gmail.com.

9. International Transfers

Your data may be transferred to and processed in countries outside your own. We rely on appropriate safeguards (such as Standard Contractual Clauses) where required.

10. Children's Privacy

The Service is not directed to children under 16, and we do not knowingly collect data from them. If you believe a child has provided us with data, contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by posting the updated policy on this page and updating the "Last updated" date.

12. Contact

Questions about privacy? Contact us at backrapersonal@gmail.com.