Privacy Policy

Who is responsible for your data

Backchannel is the controller of personal information processed through backchannel.click and the related web application. Questions and privacy-rights requests can be sent to support@backchannel.click.

Information we collect

Depending on how you use the Service, we process:

• X identity data: X user ID, handle, display name, profile image, biography, verification status, and public account metrics returned by X or its public account-search API;
• Backchannel profile data: public slug, biography, minimum price, accepted reply format, response deadline, and whether you accept requests;
• Conversation data: request and reply text, emoji, links, references to previous messages, private audio, timestamps, payment requests, and dispute evidence;
• Wallet and transaction data: public wallet addresses, verification signatures, selected payout wallet, public balances, chain ID, transaction hashes, escrow identifiers, and public smart-contract events;
• Technical data: session and security-cookie data, request logs, browser and device information, IP address, and diagnostics produced when the Service is used; and
• Support data: information you include when asking for help or exercising your privacy rights.

How and why we use information

We use information to:

• authenticate your X identity and keep you signed in;
• publish your chosen creator profile and minimum request price;
• deliver private requests and replies to the correct participants;
• verify wallet ownership, funding, releases, refunds, and disputes;
• calculate X-account-level analytics across wallets linked to that identity;
• prevent fraud, abuse, unauthorized access, and payment-status manipulation;
• respond to support, privacy, and legal requests; and
• maintain, troubleshoot, and improve the Service.

Where data-protection law requires a legal basis, we rely on performance of our contract with you, our legitimate interests in operating and securing the Service, compliance with legal obligations, and consent where we specifically request it. You may withdraw consent at any time without affecting earlier lawful processing.

What is public and what is private

Your creator page, X identity, configured minimum, response format, and public share cards are public. Wallet addresses, token balances, transfers, and smart-contract events are independently public on Robinhood Chain. Blockchain records are permanent and cannot be edited or deleted by Backchannel.

Request text, reply text, audio, and message references are intended for the conversation participants. We do not place private message content into social share cards. Authorized personnel and service providers may access private data only when needed for support, security, dispute handling, or legal compliance.

Cookies and session persistence

Backchannel uses a strictly necessary, HTTP-only session cookie to keep your X identity signed in for up to 30 days. Temporary OAuth security cookies expire after approximately 10 minutes. These cookies support authentication and fraud prevention; the Service does not currently use third-party advertising cookies.

When we share information

We share only what is reasonably necessary with:

• X, to authenticate accounts and resolve public profiles;
• Supabase, which provides database and private audio storage;
• Vercel, which hosts and delivers the web application;
• wallets, RPC providers, Robinhood Chain, and the escrow contract for transactions;
• professional advisers and authorities where required to comply with law or protect users; and
• a successor in a merger, financing, acquisition, or sale, subject to appropriate safeguards.

We do not sell personal information or use private request content for targeted advertising.

International transfers

Service providers may process information outside your country. Where required, we use recognized safeguards for international transfers, such as adequacy decisions or standard contractual clauses. Public blockchain data is replicated globally and is not confined to a particular country.

Retention

We keep account, conversation, transaction-verification, and dispute data while your account is active and afterward for as long as reasonably necessary to provide the Service, resolve disputes, prevent fraud, and meet legal, accounting, or security obligations. Temporary wallet challenges expire after use or a short security window. Private audio is retained with its related conversation unless deletion is requested and no overriding obligation requires retention.

A deletion request can remove or de-identify data we control, but cannot remove public blockchain records or copies controlled independently by X or other third parties.

Your choices and rights

Depending on your location, you may have rights to access, correct, delete, restrict, or receive a portable copy of your personal data; object to certain processing; withdraw consent; and complain to your local data-protection authority. We may need to verify your X identity or other details before completing a request.

You can disconnect your X session from the Console. Wallet connections in a browser and verified wallet links in Backchannel are distinct; disconnect or unlink each where offered. You may also contact us for assistance through Support.

Security and children

We use measures designed to protect data, including encrypted transport, HTTP-only session cookies, participant-scoped access checks, private audio storage, signed wallet challenges, and on-chain receipt verification. No system is completely secure, so please report suspected account compromise immediately.

Backchannel is not intended for anyone under 18. If you believe a minor has provided data, contact us so we can investigate and delete it where appropriate.

Policy changes

We may update this policy to reflect changes to the Service, providers, or law. We will update the date above and provide additional notice when a change materially affects your rights.