This page is maintained by BACKEND Booking LLC to answer common security and privacy questions about BACKEND Booking. It describes controls that are enabled today. It is not a certification, audit report, or independent verification.
Access and authentication
- Email/password and Google sign-in, handled by our managed authentication provider.
- Passwords are never stored in plaintext; sessions use short-lived tokens with refresh.
- Optional "keep me signed in"; sessions can be ended by signing out.
- Row-level access controls scope every database read and write to the account that owns the data.
- Administrative and moderation actions are logged.
Platform and hosting
- Hosted on managed cloud infrastructure with a Cloudflare edge in front of the application.
- All traffic is served over HTTPS/TLS; data is encrypted at rest by the storage provider.
- Server-side secrets are stored in a managed secret store and never shipped to the browser.
Payments
- Payments and payouts are processed by Stripe and Stripe Connect.
- Card details are entered directly into Stripe-hosted elements — they never reach our servers.
- We store only payment metadata (amount, status, brand, last four digits, Stripe identifiers).
- Stripe performs regulated identity and business verification for Creators receiving payouts.
Data collection and use
We collect the account, profile, messaging, booking, media, and usage data described in the Privacy Policy, and use it to operate the marketplace, process payments, prevent fraud, and support users. We do not sell personal information and do not share it for cross-context behavioral advertising.
Sensitive uploads
Identity verification documents are stored in a private, access-controlled bucket that is not publicly readable and is accessible only to the submitting user and our review team.
Subprocessors and integrations
- Stripe — payments, Connect payouts, fraud tooling.
- Managed database, authentication, and object storage provider — application data.
- Cloudflare — edge delivery, DDoS protection.
- Transactional email provider — account and booking notifications.
- Analytics and error-monitoring providers — product usage and diagnostics.
Cookies and analytics
We use strictly necessary cookies for sign-in and security, preference storage, and aggregate usage analytics. Details in the Cookie Policy.
Retention and deletion
Account data is kept while the account is active. On deletion, personal data is removed or de-identified within 30 days, except transaction, tax, and fraud-prevention records retained as described in the Privacy Policy. You can export or delete your account from Settings → Account.
Privacy requests
Access, correction, deletion, portability, and opt-out requests: contact@backendbooking.com. We respond within 30 days.
Trust & safety controls
- Identity verification badges and Stripe-verified payout accounts.
- Escrowed payments with a dispute and refund process.
- Automated detection of off-platform contact and payment attempts, with in-app warnings.
- In-app reporting and blocking on profiles, messages, and listings; reports reviewed within 24 hours.
- Moderation queue with enforcement history and appeals.
Security contact and vulnerability reporting
Report a suspected vulnerability or security incident privately to contact@backendbooking.com with steps to reproduce. Please give us a reasonable window to remediate before public disclosure. We will notify affected users and regulators of a qualifying breach as required by law.
Shared responsibility
Our infrastructure providers secure the underlying platform. BACKEND Booking LLC is responsible for application configuration, access controls, and the practices described above. You are responsible for keeping your credentials secure, choosing what you publish on your public profile, and reviewing counterparties before meeting or paying.
Compliance
We are not currently claiming SOC 2, ISO 27001, PCI DSS, HIPAA, or any other certification for BACKEND Booking. Card data handling is delegated to Stripe, a PCI-certified provider. For a security questionnaire or vendor review, contact contact@backendbooking.com.