Privacy Policy

Backenda is a backend operations agency for e-commerce brands. We operate at backenda.co. For any questions about this policy, contact us at hello@backenda.co or on WhatsApp at wa.me/6281226968199.

When you use Backenda, we collect the following information:

• Name and email address — provided when your account is created by our team
• Store information — number of stores, operational details, and inbox access you share with us during onboarding
• Billing information — payment method details processed securely via Stripe — we never see raw card numbers
• Account usage — how you interact with your dashboard (page views, actions taken)
• Communications — messages you send via email or WhatsApp to our team

• To provide and manage your backend operations subscription
• To communicate with you about your account, team, and deliverables
• To process billing and manage recurring payments
• To upload and deliver your performance reports
• To improve our service quality and internal processes

Your account and operational data is stored securely using Supabase, a SOC 2-compliant database platform. Row-level security is enabled — you can only access your own data.

Payment information is handled entirely by Stripe, a PCI-DSS Level 1 certified payment processor. Backenda stores only your Stripe customer ID, never your card details.

If a merchant connects their Shopify store to Backenda (through our Shopify app or a store access token), we read that store's order data. We use it for one purpose only: helping our support team answer the merchant's customer questions, such as where an order is and when it will arrive.

• What we read: order number, order date, payment status, fulfillment status, tracking number and link, and order total.
• What we do not read: we do not request customer names, email addresses, phone numbers, or postal addresses from Shopify.
• Read-only: we never create, change, or delete anything in the store.
• Not stored: order data is read live when it is needed and shown only to the merchant and our support team. We do not keep a copy.
• Never sold, never used for marketing, advertising, profiling, or automated decisions.
• Protected: the store access token is kept in our database, which is encrypted at rest, and all traffic uses HTTPS.
• Deleted on uninstall: when the app is uninstalled we delete the access token immediately, and we honour Shopify's customer data request and data erasure (GDPR) requests.

We do not sell, rent, or trade your personal data. We share data only with the following trusted service providers necessary to operate our service:

We retain your data for as long as your account is active. After cancellation, data is held for up to 90 days before deletion unless required by law to retain longer. You may request earlier deletion by contacting us.

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Object to processing of your personal data

To exercise any right, email hello@backenda.co or message us on WhatsApp.

We use session cookies strictly for authentication. No advertising, tracking, or third-party analytics cookies are used.

We may update this policy from time to time. Active clients will be notified of material changes via email. Continued use of the service after changes constitutes acceptance.