Privacy Policy

1. About this policy

Backbone Studio handles personal information for the Backframe website, accounts, desktop software and Templates library. This policy explains our usual practices. Contact us at support@backbonestudio.com.au with privacy questions or requests.

2. Information we collect

• Account information: email address, sign-in details, account identifier, name, studio or company, profile photo you upload and preferences you choose to provide. If you sign in with a supported provider, we receive the identity details that provider shares for authentication.
• Product and billing information: plan, licence status, connected computer name, operating system, app version, activation and last check-in dates. The desktop app checks in periodically to confirm your licence and device. If purchases are enabled, our payment provider handles checkout and payment details; we receive transaction, customer and subscription references needed to provide access and support.
• Information you send us: waitlist sign-ups (email address and creator type), newsletter sign-ups (email address, and for account holders the first and last name on your profile and whether you subscribed from the homepage, at sign-up or in your account), support requests (email address, subject, category and message) and other correspondence, along with the consent you give when signing up; template files and their title, description and game; ratings and reports you submit.
• Partner profiles: if you are a creator partner and publish a partner profile, the display name, headline, description, social media links, contact email and testimonial you enter are shown publicly at backfra.me/partners with your username and profile photo, alongside your creator code. You can edit or unpublish it at any time in your account. If you allow it, we may also quote your testimonial, with your display name and photo, elsewhere on the website and in Backframe marketing.
• Consent records: when you create an account or are first asked in your account, we record that you accepted the Terms of Service and Privacy Policy, the version accepted and when, and whether you chose to receive the newsletter and when you last changed that choice.
• Campaign information: if you arrive through a link carrying campaign tags (such as utm_source or utm_campaign), we keep those tags in your browser for the visit and attach them to your account when you sign up and to checkout when you buy, so we can tell which campaigns bring people to Backframe.
• Technical information: information needed to operate and protect the website and Service, such as IP address, browser or device details, approximate country, request logs and security events. We use your approximate country (provided by Cloudflare) to suggest a local currency for displayed prices. Authentication uses browser storage or essential cookies to keep you signed in. We also use browser storage to remember your cookie choice and campaign tags for the visit. With your permission, Google Analytics uses analytics cookies to measure page visits, navigation, engagement, form attempts and outcomes, downloads, template interactions and purchases. We send fixed action labels and numeric information rather than form contents, names, email addresses, passwords, support messages, files or authentication tokens. Purchase reports include an opaque transaction reference, plan, currency and amount; they do not include card details.
• Creator partnership agreements: if you are an approved Backframe creator partner and sign your partnership agreement, we record your full legal name, typed electronic signature, account email, the agreement version and exact text you accepted, your creator code terms at the time, the date and time, your IP address and browser details, and a fingerprint (SHA-256) of the agreement. We use this only as evidence of the agreement.

Spam and abuse protection: our forms use Cloudflare Turnstile to check that a submission comes from a person. Turnstile may process browser and device signals and your IP address under Cloudflare’s policy. To limit repeated submissions, we store a one-way hashed version of your IP address with a submission count for up to one day; we do not store the raw IP address for this purpose.

Backframe is designed to edit your source video and project media locally on your computer. The Templates library uploads the layout file you choose to submit; it does not upload your source recordings as part of that submission.

3. How we use information

We use information to create and secure accounts, authenticate sign-ins, provide licences and downloads, manage billing, licence activation and connected computers, run and moderate the Templates library, answer support requests, maintain and improve the Service, prevent abuse, and meet legal obligations. We send the Backframe newsletter only when you subscribe, either through the newsletter form or by ticking the optional newsletter box when you create your account; it is never a condition of having an account. We use MailerLite to send the newsletter, and share your email address (and, for account holders, your first and last name) with it for that purpose. We send other product updates in line with the preferences you choose or where otherwise permitted by law. Essential account, billing and security messages may still be sent.

4. What is public

After approval, a shared template file and its title, description, game, upload date, template ID, ratings and the creator handle you choose to add (if any) can be seen or downloaded by others. Do not put personal information or material you do not want to share in a template or its description. Reports are for moderators and are not displayed in the library. Your account email, billing details and support messages are not displayed with templates.

5. Who we share information with

We use service providers to run Backframe, including Supabase for accounts, database and template storage, Cloudflare for website delivery, security and bot protection (Turnstile), Stripe for payments when checkout is available, MailerLite for the waitlist and newsletter emails, and Google for website analytics when you allow analytics cookies. To show prices in your local currency we fetch exchange rates from a public rates service; no personal information is sent to it. If you choose third-party sign-in, the selected identity provider also handles that sign-in under its own policy. We may share information with professional advisers, regulators or law enforcement where required or permitted by law, or as needed to protect the Service and users. We do not sell personal information.

6. Where information is processed

Our main Supabase project is hosted in Australia. Google Analytics, Cloudflare, MailerLite, payment and sign-in providers may process information in other countries, including the United States, as part of their services. We take reasonable steps to protect information shared with service providers. Contact us if you would like more detail about a particular provider or transfer.

7. Security and retention

We use access controls and private storage for account data, profile photos and submitted template files while they await review. Approved templates are distributed through time-limited download links. No online service can guarantee absolute security.

We keep information while it is needed to provide the Service and for legitimate support, security, accounting, dispute and legal purposes. The period depends on the type of information and applicable requirements. When it is no longer needed, we take reasonable steps to delete or de-identify it. Public copies of a downloaded template may remain with people who obtained it before removal.

Signed creator partnership agreements and their signing evidence are kept in private storage, available only to the creator who signed and to authorised staff, for seven years after the partnership ends, so the agreement can be relied on if a question or dispute arises.

8. Your choices and requests

You can update account details and email preferences in your account, including turning the newsletter on or off under Preferences. You can also unsubscribe using the link in any newsletter email. To request access to or correction of personal information, account deletion, or removal of a template, email support@backbonestudio.com.au. We may need to verify your identity and may retain information where the law or a legitimate need requires it. You can allow or reject optional analytics and change your choice at any time using Cookie settings at the bottom of the website. Analytics is off until you allow it. Rejecting analytics does not affect your account or website features. You can also manage browser storage through your browser, but removing essential sign-in storage may sign you out.

9. Privacy complaints

If you are concerned about how we have handled personal information, email us with details. We will review your concern and respond within a reasonable time. If you are in Australia and remain dissatisfied, you may contact the Office of the Australian Information Commissioner.

10. Changes to this policy

We may update this policy as Backframe changes. We will post the updated version here and change the effective date. For significant changes, we will provide additional notice where appropriate.