BackerKit Privacy and Data Policy

This Privacy Policy governs the manner in which BackerKit collects, uses, maintains and discloses information collected from users (each, a "User") of the backerkit.com website ("Site"). This privacy policy applies to the Site and all products and services offered by BackerKit.

Personal identification information (PII)

We may collect personal identification information from Users in a variety of ways, including, but not limited to, when Users visit our site, register on the site, place an order, subscribe to the newsletter, respond to a survey, fill out a form, and in connection with other activities, services, features or resources we make available on our Site. Users may be asked for, as appropriate, name, email address, mailing address, payment information. We will collect personal identification information from Users only if they voluntarily submit such information to us. Users can always refuse to supply personally identification information, except that it may prevent them from engaging in certain Site related activities.

Non-personal identification information

We may collect non-personal identification information about Users whenever they interact with our Site. Non-personal identification information may include the browser name, the type of computer and technical information about Users means of connection to our Site, such as the operating system and the Internet service providers utilized and other similar information.

Web browser cookies

Our Site may use "cookies" to enhance User experience. User's web browser places cookies on their hard drive for record-keeping purposes and sometimes to track information about them. User may choose to set their web browser to refuse cookies, or to alert you when cookies are being sent. If they do so, note that some parts of the Site may not function properly.

You may find additional information regarding our Cookie Policy here.

How we use collected information

BackerKit may collect and use Users personal information for the following purposes:

To improve customer service Information you provide helps us respond to your customer service requests and support needs more efficiently.
To personalize user experience We may use information in the aggregate to understand how our Users as a group use the services and resources provided on our Site.
To improve our Site We may use feedback you provide to improve our products and services.
To process payments We may use the information Users provide about themselves when placing an order only to provide service to that order. We do not share this information with outside parties except to the extent necessary to provide the service.
To send periodic emails We may use the email address to send User information and updates pertaining to their order. It may also be used to respond to their inquiries, questions, and/or other requests. If User decides to opt-in to our mailing list, they will receive emails that may include company news, updates, related product or service information, etc. If at any time the User would like to unsubscribe from receiving future emails, we include detailed unsubscribe instructions at the bottom of each email or User may contact us via our Site.

Personal identifying information we collect

BackerKit collects personal identifying data in several ways.

Backer data collected when a project syncs via importing backers may include:

Email address
Address Country
Name
Original platorm ID
Original platform survey answers

Backer data inputted by a backer may include:

Answers to survey questions
Email address
Full address information (including phone number for shipping purposes)

Data collected via subprocessing tools:

IP address
Device/browser/session information
URL parameters

Identity verification and payments

Payment regulations require BackerKit and its payment partners to verify the identity of people and businesses that receive funds. We also verify identity to prevent fraud, identity theft, and account takeover, and to protect backers. Creators must complete verification before they can launch a BackerKit Crowdfunding project, accept pledges, or receive payouts. In some cases, project team members, business representatives, and beneficial owners must also complete verification. If you do not provide the required information, you will not be able to use these features.

Stripe processes payments and payouts for BackerKit Crowdfunding projects. Stripe is required by Know Your Customer (KYC) and anti-money laundering regulations to collect and verify information about the people and businesses it pays. Depending on your country and business type, Stripe may require the following:

Legal name, date of birth, home address, email, and phone number.
A government identification number, such as a Social Security number or the last four digits of it, or a national ID number.
Business name, address, tax ID, and business structure.
Information about business representatives and beneficial owners.
Bank account details for payouts.
A government-issued ID image or proof of address, when Stripe cannot verify information electronically.

Stripe may request more information as funds raised increase or over time, and may pause charges or payouts until it is provided. This information is collected and processed under the Stripe Services Agreement (https://stripe.com/legal/ssa) and Stripe's Privacy Policy (https://stripe.com/privacy). BackerKit shares information with Stripe as described in our Terms of Service (https://www.backerkit.com/terms_of_service).

BackerKit uses Plaid Identity Verification to confirm that a person is who they say they are. Depending on the check, Plaid may collect the following:

An image of a government-issued ID, and the name, date of birth, address, ID number, and issue and expiration dates on it.
- During verification, Plaid may ask you to provide "documentation that contains your photograph" or to "verify your identity by providing a photograph or video" of yourself. Verification takes place inside Plaid's flow. Your ID images and selfie go directly to Plaid, not to BackerKit's servers. BackerKit receives the verification result and the data Plaid returns for that session. Access to ID images and selfies through Plaid is limited to authorized BackerKit Trust & Safety staff, and only to review a verification or investigate fraud.
A selfie photo or video, used to check that a live person is present and to compare your face to your ID photo.
- The face comparison step uses biometric data. Plaid collects it as a service provider to BackerKit. Plaid states that when it provides identity verification services, "we only collect and process your data as a service provider to that developer, and so the developers determine the purpose and means by which your data is processed." BackerKit uses this data only to verify identity and to prevent fraud.
Name, date of birth, address, phone number, email, and ID number, checked against third-party data sources.
IP address, device, and network information used to detect fraud and stolen or synthetic identities.

Plaid's End User Privacy Policy and Biometric Policy and Release are at https://plaid.com/legal/

How verification results are used

Verification results may be used to approve, delay, or deny a project launch, payouts, or account access. If a decision is based on an automated check, you can ask for review by a member of our team by emailing trustandsafety@backerkit.com

How we protect your information

We adopt appropriate data collection, storage and processing practices and security measures to protect against unauthorized access, alteration, disclosure or destruction of your personal information, username, password, transaction information and data stored on our Site.

In the event of a data breach that is likely to result in a high risk to the rights and freedoms of individuals, we will notify all parties involved as well as any supervisory authorities within a reasonable timeframe. We have procedures in place to effectively detect, report and investigate these personal data breaches.

Sensitive and private data exchange between the Site and its Users happens over a SSL secured communication channel and is encrypted and protected with digital signatures. BackerKit will also automatically exclude all content uploaded by our creators for their projects from AI training.

We do not sell, trade, or rent Users personal identification information to others. We may share generic aggregated demographic information not linked to any personal identification information regarding visitors and users with our business partners, trusted affiliates and advertisers for the purposes outlined above.

We may use third party service providers to help us operate our business and the Site or administer activities on our behalf, such as sending out newsletters or surveys. We may share your information with these third parties for those limited purposes provided that you have given us your permission.

Expiration of personal information

BackerKit does not automatically expire any data that we store as a processor since personal data may be useful to users for long time periods. We have various expiration times for data on our sub-processors once the data there is no longer needed.

How we handle requests for data access, rectification, erasure, and data portability

As a Data controller, project creators can handle all of these by changing or exporting data on a backer profile page. We have also provided a tool to pseudonymise backer data for erasure requests on a backer profile page. If a backer has an account with BackerKit (our Backer Account provides backers with access to all projects using BackerKit), they can send a request to gdpr@backerkit.com and we will delete all data associated with all of their projects.

Third-party websites

Users may find advertising or other content on our Site that link to the sites and services of our partners, suppliers, advertisers, sponsors, licensors and other third parties. We do not control the content or links that appear on these sites and are not responsible for the practices employed by websites linked to or from our Site. In addition, these sites or services, including their content and links, may be constantly changing. These sites and services may have their own privacy policies and customer service policies. Browsing and interaction on any other website, including websites which have a link to our Site, is subject to that website's own terms and policies.

Compliance with Children's Online Privacy Protection Rule ("COPPA")

Protecting the privacy of the very young is especially important. For that reason, we never collect or maintain information at our Site from those we actually know are under 13, and no part of our website is structured to attract anyone under 13.

Sub-processors

BackerKit uses several sub-processor to help improve the product. Including tools to help illuminate parts of the website that are confusing or underused, allowing our product team to improve the customer experience.

These tools also help surface errors and allow BackerKit to gain insights into how users are using the app. These tools also help our Customer Success and Backer Support teams provide support and guidance to creators and backers.

Our sub-processors have access to a restricted set of information in order to render the service provided.

List of sub-processors

Application Hosting:

Amazon Web Services, Cloudflare, Heroku
- as Web Host
- as Worker Host
Crunchy Bridge
- as Database Provider

via Heroku Plugins:

Librato - Development (logging)
Papertrail - Liatorp (logging)
Redis Cloud
Heroku Scheduler

Operations:

Honeybadger
Datadog

Analytics and referral tracking:

Facebook
Google Ads
Google Analytics

Product Research and development:

LogRocket

Messaging:

Mailchimp
Mailgun

Payments:

PayPal
Stripe

Identity verification :

Plaid

CRM:

Salesforce

Shipping:

Address Validation
SmartyStreets
EasyPost

Support Dashboards:

Helpscout
Front

Sharing:

Twitter
Facebook

Changes to this privacy policy

BackerKit has the discretion to update this privacy policy at any time. When we do, we will revise the updated date at the bottom of this page. We encourage Users to frequently check this page for any changes to stay informed about how we are helping to protect the personal information we collect. You acknowledge and agree that it is your responsibility to review this privacy policy periodically and become aware of modifications.

Your acceptance of these terms

By using this Site, you signify your acceptance of this policy. If you do not agree to this policy, please do not use our Site. Your continued use of the Site following the posting of changes to this policy will be deemed your acceptance of those changes.