Always know where your next client is coming from

    BackkrBackkr.

    Legal

    Privacy Policy & SaaS Terms

    Everything that governs your use of Backkr, on one page. Effective 15 June 2026.

    Privacy Policy

    Effective Date: 15 June 2026 · Last Updated: 15 June 2026

    Backkr Limited ("Backkr", "we", "us", or "our") is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use, store, and safeguard your information when you use our AI-powered marketing analytics platform and website at backkr.com (collectively, the "Services"). It also describes your rights and how to exercise them.

    By accessing or using our Services, you agree to the practices described in this policy. If you do not agree, please do not use our Services.

    1. Who We Are

    Backkr Limited is a company incorporated in New Zealand. We provide an AI-powered marketing analytics SaaS platform that connects to third-party data sources to generate plain-English customer insights, audience personas, and growth playbooks for small service businesses.

    Backkr Limited
    Ministry of Awesome, Christchurch, New Zealand
    Email: team@backkr.com
    Phone: +64 27 766 4199
    Website: backkr.com

    2. Scope of This Policy

    This policy applies to:

    • All visitors to backkr.com
    • Trial and paying subscribers to the Backkr platform
    • Data processed by Backkr on behalf of our customers through connected integrations
    • Users accessing Backkr through our reseller and agency partners

    This policy does not apply to third-party platforms and services (such as Meta, Google, LinkedIn, or TikTok) whose own privacy policies govern their data practices. We encourage you to review those policies directly.

    3. Data We Collect

    3.1 Information You Provide

    When you register, subscribe, or contact us, we collect:

    • Name and email address
    • Business name, website URL, industry type, products and services offered, and marketing goals
    • Business tone and messaging preferences from your onboarding responses
    • Billing information (processed securely through Stripe; we do not store full card details)
    • Communications and support requests you send to us

    3.2 Authentication & Session Data

    • Authentication tokens stored in secure, httpOnly cookies
    • OAuth refresh tokens (expire after 30 days maximum)
    • Browser local storage data for preserving signup progress and account preferences
    • Login credentials managed through our third-party authentication service provider

    3.3 Data From Connected Integrations

    Backkr integrates with the following platforms to deliver our analytics Services. When you authorise these connections, we receive and process data as described:

    Google Analytics 4 (GA4)

    We access website analytics data via the GA4 Data API and Admin API. This includes:

    • Core metrics: active users, sessions, page views, conversions, transactions, and revenue
    • Engagement metrics: session duration, bounce rate, engaged sessions, and event counts
    • Detailed analytics: geographic location, traffic sources, campaigns, devices, browser and OS preferences, landing pages, page paths, and content engagement
    • E-commerce data: purchases, categories, items, and transaction details
    • Demographics and ads data: age ranges, gender, and keyword queries where available
    • Temporal patterns: usage by time of day and day of week

    We do not receive personally identifiable visitor data from GA4. Data is aggregated and de-identified at source in accordance with Google's data policies. Raw GA4 API responses are never directly transmitted to AI services.

    Google Search Console (GSC)

    If you choose to connect Google Search Console, we access performance data via the GSC API, including:

    • Search query performance (impressions, clicks, click-through rate, average position)
    • Page-level search performance data
    • Geographic and device breakdowns for search traffic

    GSC data is used solely to generate SEO insights and recommendations within your Backkr account. Individual user-level data is not accessible via GSC.

    Meta (Facebook & Instagram), Ads and Organic APIs

    • Ad account performance data (impressions, clicks, spend, reach, ROAS)
    • Audience insights and demographic breakdowns (age, gender, location, aggregated)
    • Page engagement metrics (followers, reach, post interactions)
    • Campaign, ad set, and ad-level performance data

    We access only data for which you have granted Backkr explicit permission through Meta's OAuth authorisation flow. Backkr does not access your personal Facebook or Instagram profile.

    LinkedIn, Ads and Organic APIs

    • Sponsored content and ad campaign performance data
    • Organic Company Page analytics (follower growth, post engagement, demographics)
    • Audience demographics for ad targeting insights (seniority, industry, job function, aggregated)

    LinkedIn data is accessed only with your explicit authorisation. Backkr does not access LinkedIn member profile data beyond what is aggregated and de-identified in LinkedIn's analytics endpoints.

    TikTok, Ads and Organic APIs

    • Ad account performance metrics (video views, clicks, conversions, spend)
    • Audience insights (age, gender, location, aggregated at platform level)
    • Organic account analytics (followers, video performance, engagement rates)

    All TikTok data is accessed solely for the purpose of delivering analytics to your Backkr account. We comply with TikTok's Platform Policy and data use restrictions.

    3.4 Website Content Analysis

    To understand your brand and generate relevant recommendations, we analyse publicly available content from your connected website, including page text and meta descriptions, page titles and site structure, and calls-to-action, forms, and conversion elements. We only analyse publicly available information accessible to any internet user. This content, along with your business information, may be sent to third-party AI services to help generate relevant marketing content and recommendations. We do not scrape or store content from websites you do not own or have authorised us to analyse.

    3.5 Automatically Collected Data

    • IP address for region detection and pricing localisation
    • Browser type, operating system, and device information
    • Pages visited, time spent, and clickstream data
    • Referral source and UTM parameters
    • Session and cookie identifiers

    3.6 Cookies and Tracking Technologies

    • Authentication cookies (httpOnly, secure), required for account access
    • OAuth tokens (httpOnly, secure, 30-day expiry), for maintaining connected integrations
    • Session data, for preserving signup progress and account preferences
    • Analytics cookies (via GA4), to understand how our website is used
    • Advertising pixels (Meta Pixel, LinkedIn Insight Tag, Google Ads tag, TikTok Pixel), where deployed on our marketing site for attribution and retargeting

    You can manage cookie preferences through your browser settings or our cookie consent banner. Disabling certain cookies may affect platform functionality.

    4. How We Use Your Data

    • Provide, operate, and improve the Backkr platform and Services
    • Analyse your GA4, GSC, and social platform data to identify patterns and opportunities
    • Generate AI-powered insights, audience personas, growth playbooks, and content recommendations
    • Analyse your public website to provide SEO and conversion recommendations
    • Authenticate your account and maintain security
    • Detect your geographic region for appropriate pricing
    • Process billing and manage your subscription
    • Send transactional emails (onboarding, alerts, account notifications)
    • Send product updates and marketing communications (where you have opted in or where permitted under applicable law)
    • Respond to support requests and customer enquiries
    • Comply with legal obligations and enforce our Terms of Service
    • Detect and prevent fraud, abuse, and security incidents
    • Conduct research and analytics to develop new features

    5. AI-Powered Insights

    We use third-party AI services to generate marketing recommendations and content. This section explains exactly what data is shared with those services and how it is handled.

    5.1 What Data Is Shared With AI Services

    • Aggregated Google Analytics and Search Console metrics and behavioural patterns
    • Your website URL, business name, and industry (for context)
    • Publicly available website content scraped from your connected site
    • Geographic data at country or region level
    • Business information you provide during onboarding (tone, goals, products, services)

    5.2 What Is NOT Shared With AI Services

    • Individual user-level session data. Only aggregated, summarised analytics data is processed
    • Raw Google Analytics or Search Console API responses. These are never directly transmitted
    • Payment or billing information
    • Your account credentials or authentication tokens

    5.3 AI Data Handling

    • Third-party AI services do not use your data to train their general-purpose models
    • AI services delete processed data within 30 days per their policies
    • Original Google Analytics and Search Console data never leaves our secure systems without aggregation

    Outputs generated by AI are provided for informational and planning purposes only. They do not constitute professional marketing, legal, financial, or business advice. You are responsible for reviewing and approving any AI-generated content before use.

    6. Legal Bases for Processing

    • Contract performance, to deliver the Services you have subscribed to
    • Legitimate interests, to improve our Services, ensure security, and conduct business analytics, where those interests are not overridden by your rights
    • Consent, for marketing communications and non-essential cookies
    • Legal obligation, where we are required to process data by law

    For users in the United Kingdom, processing is governed by the UK GDPR and Data Protection Act 2018. For EEA, UK, and Switzerland users, Backkr acts as a data controller for your account information and a data processor for your connected analytics data. For users in Australia, processing is governed by the Privacy Act 1988 (Cth) and the Australian Privacy Principles. For users in New Zealand, processing is governed by the Privacy Act 2020.

    7. Data Sharing and Disclosure

    We do not sell your personal data. We may share data in the following circumstances:

    7.1 Service Providers

    We engage trusted third-party service providers to operate our platform, including cloud hosting, email delivery, payment processing (Stripe), error monitoring (Sentry, no PII collected), AI services, and customer support tooling. These providers process data only on our instructions and are bound by appropriate data processing agreements.

    7.2 Google API Services Compliance

    Backkr's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google API data only to provide the Service. We do not use Google user data for advertising or any purpose other than delivering your account's insights and outputs. Access tokens are stored securely with encryption and refreshed automatically. You can revoke Backkr's access at any time through your Google Account settings or your Backkr dashboard.

    7.3 Third-Party Platform APIs

    To deliver our Services, we transmit authentication tokens and API queries to Meta, Google, LinkedIn, and TikTok on your behalf. These platforms process data under their own privacy policies. We store only the analytics data returned to us via these APIs.

    7.4 Reseller and Agency Partners

    Where you access Backkr through a partner organisation (such as The Marketing Club, Pretty Little Marketer, or Ministry of Awesome), your partner may have access to your account data under a reseller agreement. Partners are bound by confidentiality and data protection obligations.

    7.5 Business Transfers

    In the event of a merger, acquisition, trade sale, or asset transfer, your data may be transferred to the acquiring entity under the same privacy protections described in this policy. We will notify you of any such change via email and update this policy accordingly.

    7.6 Legal Requirements

    We may disclose data where required by law, court order, or government authority, or where necessary to protect the rights, property, or safety of Backkr, our users, or the public.

    8. International Data Transfers

    Backkr is based in New Zealand. Our infrastructure and service providers may process data in other jurisdictions, including Australia, the United States, and the United Kingdom. When transferring data internationally, we ensure appropriate safeguards are in place, including:

    • Standard Contractual Clauses (SCCs) for transfers from the UK and EEA
    • Transfers to countries with adequacy decisions or equivalent protections
    • Contractual data protection obligations with all processors

    9. Data Retention

    We retain your data for as long as your account is active or as needed to provide the Services. Specific retention periods are:

    • Google Analytics and Search Console data: retained for up to 3 years
    • AI-generated insights and outputs: retained for 12 months
    • Website content analysis: retained for 6 months
    • User account and business profile data: retained until account deletion or 2 years of inactivity
    • Account and billing data: retained for 7 years following account closure for legal and tax compliance
    • Support communications: retained for 2 years
    • Authentication tokens: expire after 30 days
    • Website analytics and cookie data: per our GA4 data retention settings (default 14 months)

    You may request deletion of your data at any time by emailing team@backkr.com. Upon account deletion, all associated data is permanently deleted from active systems within 30 days. Backups may be retained for up to 90 days before permanent deletion. You can disconnect Google Analytics, Search Console, and social platform accounts at any time from your account settings.

    10. Your Rights

    Depending on your location, you may have the following rights regarding your personal data:

    New Zealand (Privacy Act 2020)

    • Right to access your personal information
    • Right to correct inaccurate information
    • Right to complain to the Privacy Commissioner at privacy.org.nz

    Australia (Privacy Act 1988)

    • Right to access and correct your personal information
    • Right to complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au

    United Kingdom & EEA (UK GDPR / GDPR)

    • Right of access (Subject Access Request)
    • Right to rectification
    • Right to erasure ('right to be forgotten')
    • Right to restriction of processing
    • Right to data portability
    • Right to object to processing
    • Right to withdraw consent at any time
    • Right to withdraw consent for AI processing of your data
    • Right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

    To exercise any of these rights, please contact us at team@backkr.com. We will respond within 30 days (or within the timeframes required by applicable law). We may need to verify your identity before processing your request.

    11. Security

    • Encryption of data in transit using TLS/HTTPS
    • Encryption of data at rest where applicable
    • Role-based access controls and multi-factor authentication
    • Secure storage of API tokens and OAuth credentials (httpOnly, secure cookies)
    • Data minimisation, we collect only what is necessary to provide the Service
    • Hosting on ISO 27001 and SOC 2 compliant infrastructure providers
    • Monitoring, auditing, and incident response procedures

    No method of transmission over the internet is 100% secure. In the event of a data breach that affects your rights and freedoms, we will notify you and the relevant supervisory authority as required by law.

    12. Children's Privacy

    Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us at team@backkr.com and we will delete it promptly.

    13. Third-Party Links

    Our platform and website may contain links to third-party websites or integrations. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing them with any information.

    14. AI and Automated Decision-Making

    Backkr uses AI and machine learning to generate marketing insights, audience personas, SEO recommendations, and growth playbooks from your connected data. These outputs are informational and do not constitute automated decisions that produce legal or similarly significant effects on you or your business. You retain full control over how you use the insights generated by Backkr. You may withdraw consent for AI processing of your data at any time by contacting team@backkr.com.

    15. Marketing Communications

    We may send you emails about product updates, new features, and marketing tips where you have opted in or where permitted under applicable law. You can unsubscribe at any time by clicking the unsubscribe link in any email or by contacting team@backkr.com. We will continue to send you essential transactional emails (such as billing receipts and security alerts) regardless of your marketing preferences.

    16. Changes to This Policy

    We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

    • Update the 'Last Updated' date at the top of this policy
    • Notify you by email if you are a registered user
    • Post a notice on our website

    Your continued use of our Services after any changes constitutes your acceptance of the updated policy.

    SaaS Terms & Conditions

    Effective Date: 1 January 2025 · Last Updated: 15 June 2026

    These Terms and Conditions ("Terms") govern your use of https://www.backkr.com ("Site" or "Service"), a SaaS platform owned and operated by Backkr Limited ("Backkr", "we", "us", or "our"). By using this Site, you confirm that you have read, understood, and agree to be bound by these Terms.

    1. Service Description

    Backkr provides a software-as-a-service (SaaS) platform that delivers:

    • Customer Profile Analysis (AI-driven analysis of website visitors using Google Analytics 4 data)
    • Marketing Plan Generation (automated creation of personalised marketing strategies and action plans)
    • Website Analysis Tools (recommendations for improving website content, SEO, and conversion rates)
    • Content Generation (AI-assisted creation of marketing content tailored to your customer profiles)
    • Analytics Integration (connection with Google Analytics 4 to extract behavioural insights)

    Our Service is delivered entirely online as subscription software.

    2. Intellectual Property

    All content, software, designs, text, graphics, logos, and other materials available on our Site are the exclusive property of Backkr and protected by copyright, trademark, and other intellectual property laws. You may not copy, reproduce, distribute, modify, or create derivative works without express written permission.

    3. Subscriptions and Billing

    3.1 Subscription Plans: We offer monthly and annual subscription plans. Pricing and plan details are displayed on our pricing page at the time of purchase.

    3.2 Automatic Renewal: Your subscription automatically renews at the end of each billing period until you cancel.

    3.3 Payment Processing: All payments are processed securely through Stripe. We accept major credit cards and debit cards.

    3.4 Cancellation: You may cancel your subscription at any time through your account settings or the Stripe Customer Portal. Cancellations take effect at the end of your current billing period.

    3.5 Refunds: Subscription fees are non-refundable except where required by applicable consumer protection laws.

    4. User Accounts and Data

    You must provide accurate, complete information when creating an account. You are responsible for maintaining the confidentiality of your account credentials. Our Service requires connection to your Google Analytics 4 (GA4) property. You grant us permission to access and analyse your GA4 data solely to provide our Service. We collect and process personal data in accordance with our Privacy Policy above. We reserve the right to suspend or terminate your account if you breach these Terms.

    5. AI-Generated Content Disclaimer

    Our Service uses artificial intelligence to generate marketing recommendations, content suggestions, and business insights. While we strive for accuracy: AI-generated content is provided "as is" without warranty; you are solely responsible for reviewing and approving any AI-generated content before use; our Service does not constitute legal, financial, or professional business advice.

    6. Service Availability and Modifications

    We strive to maintain high availability but do not guarantee uninterrupted access. We reserve the right to modify, update, or discontinue features at any time with reasonable notice of material changes.

    7. Limitation of Liability

    To the fullest extent permitted by law, Backkr shall not be liable for indirect, incidental, special, or consequential damages; loss of profits, revenue, data, or business opportunities; damages arising from use of the Service; or reliance on AI-generated content. Our total liability shall not exceed the amount you paid in the 12 months preceding the claim.

    8. Indemnification

    You agree to indemnify and hold harmless Backkr from any claims arising from your violation of these Terms, your use of the Service, or your violation of any third-party rights.

    9. Consumer Protection Law

    Where consumer protection legislation applies and cannot be excluded, these Terms will not limit your legal rights. If there is a conflict between these Terms and mandatory consumer protection provisions, the mandatory provisions shall prevail.

    10. Governing Law and Jurisdiction

    These Terms are governed by the laws of New Zealand. Any disputes shall be subject to the exclusive jurisdiction of the courts of New Zealand.

    11. Changes to These Terms

    We may update these Terms from time to time. We will notify you of material changes via email or by posting a notice on the Site. Continued use constitutes acceptance.

    Contact Us

    If you have questions, concerns, or complaints about this Privacy Policy, our SaaS Terms, or our data practices, please contact us:

    Backkr Limited
    Ministry of Awesome, Christchurch, New Zealand
    Email: team@backkr.com
    Phone: +64 27 766 4199
    Website: https://www.backkr.com

    If you are located in the United Kingdom, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. If you are located in Australia, you have the right to complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au. If you are located in New Zealand, you have the right to complain to the Privacy Commissioner at privacy.org.nz.

    © 2026 Backkr Limited. All rights reserved. Last reviewed 15 June 2026.