Privacy Policy

1. Information We Collect

Information You Provide

Account Information:

• Name, email address, phone number
• Password (encrypted)
• Profile photo (optional)
• Business name and details (for Event Partners)

Booking Information:

• Event details (date, time, location, celebration type, guest count, hours booked, and event notes)
• Communication with Event Partners or Organizers
• Reviews and ratings

Payment Information:

• Payment method details (processed securely by Stripe)
• Billing address
• Transaction history
• Payout information (for Event Partners)

Information Collected Automatically

Device and Usage Information:

• IP address
• Browser type and version
• Device type and operating system
• Pages visited and features used
• Time spent on the Platform
• Referring website or source

Location Information:

• General location based on IP address
• Precise location if you enable location services (with your consent)

Information from Third Parties

• Payment verification from Stripe
• Identity verification services (if applicable)
• Social media profiles (required for Event Partner verification; optional for Organizers)

2. How We Use Your Information

We use your information to:

Provide and Improve Our Services:

• Create and manage your account
• Process bookings and payments
• Facilitate communication between Organizers and Event Partners
• Provide customer support
• Improve and personalize your experience

Communications:

• Send booking confirmations and updates
• Send payment receipts and payout notifications
• Respond to your inquiries
• Send promotional communications (with your consent)
• Notify you of policy changes
• Send SMS text notifications about bookings, messages, and account activity (with your consent; you may opt out at any time by replying STOP or via your account notification settings)

Safety and Security:

• Verify identity and prevent fraud
• Enforce our Terms of Service
• Protect the rights and safety of users
• Comply with legal obligations

Analytics and Research:

• Analyze usage patterns to improve the Platform
• Conduct research and development
• Generate aggregated, anonymized insights

3. How We Share Your Information

Note: "Event Partners" refers exclusively to independent service providers registered on our platform (e.g. photographers, caterers, backdrop artists). Backdrop does not engage in affiliate marketing and does not share user opt-in data or phone numbers with any third parties for marketing purposes.

We may share your information with:

Other Users:

• Organizers can see Event Partner profiles, listings, and reviews
• Event Partners can see Organizer names and event details for bookings
• Reviews are publicly visible on the Platform

Service Providers:

• Stripe (payment processing)
• Twilio (SMS and communications delivery)
• Cloud hosting providers
• Email service providers
• Analytics providers
• Customer support tools

Legal and Safety:

• To comply with laws, regulations, or legal requests
• To protect Backdrop's rights and property
• To protect the safety of users or the public
• In connection with legal proceedings

Business Transfers:

• In connection with a merger, acquisition, or sale of assets
• Your information may be transferred to a successor entity

With Your Consent:

• For any other purpose with your explicit consent

We do not sell your personal information to third parties.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Keep you logged in
• Remember your preferences
• Analyze Platform usage
• Deliver relevant content

Types of Cookies:

• Essential Cookies: Required for the Platform to function
• Analytics Cookies: Help us understand how you use the Platform
• Marketing Cookies: Used to deliver relevant advertisements (with consent)

Your Choices:

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect Platform functionality.

5. Data Retention

We retain your information for as long as:

• Your account is active
• Needed to provide services to you
• Required for legitimate business purposes
• Required by law (e.g., tax records, legal disputes)

After account deletion, we may retain certain information for legal compliance, fraud prevention, or to resolve disputes.

When you delete your account, we permanently remove your personal identifiers — including your name, email address, phone number, mailing address, profile photo, password, social-media handles, and device identifiers — from your account record. We retain certain transactional records that are necessary for tax, accounting, fraud-prevention, and dispute-resolution purposes — including past reservations, payments, payouts, refunds, reviews, and messages exchanged with other users. Where these records reference you, you appear as “Former user” so that the other party’s history remains intact. Aggregated or de-identified data may be retained indefinitely.

We also maintain an internal deletion log recording the date of deletion and limited operational metadata (such as whether a Stripe Connect account was associated with the account and which listings were archived). This log is used solely for fraud prevention, regulatory compliance, and operational cleanup, and is not used for marketing or shared with other users.

If you are an Event Partner with a connected Stripe account, your Stripe Connect account is closed by Backdrop within a few business days after your account is deleted. Data held by Stripe is subject to Stripe’s own privacy policy and retention obligations (including those required by financial regulators), which may require Stripe to retain certain records after closure.

6. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure storage with access controls
• Regular security assessments
• Employee training on data protection

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Your Privacy Rights

Depending on your location, you may have the right to:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Receive your data in a portable format
• Opt-Out: Opt out of marketing communications
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, contact us at privacy@hellobackdrop.com or legal@hellobackdrop.com.

Account holders may also initiate deletion directly from within the Platform: on the web, under Account → About Me → Account management, and in the mobile app, under Edit Profile → Account management → Delete account. Deletion initiated through these self-service paths is processed under the same terms described in Section 5 (Data Retention) above.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to Know:

You can request information about the categories and specific pieces of personal information we have collected, the sources, the purposes, and the third parties with whom we share it.

Right to Delete:

You can request deletion of your personal information, subject to certain exceptions.

Right to Opt-Out of Sale:

We do not sell personal information. If this changes, we will provide a "Do Not Sell My Personal Information" link.

Right to Non-Discrimination:

We will not discriminate against you for exercising your privacy rights.

To Submit a Request:

Email: privacy@hellobackdrop.com
We will verify your identity before processing requests.

Categories of Information Collected (past 12 months):

• Identifiers (name, email, phone, IP address)
• Commercial information (transaction history, bookings)
• Internet activity (browsing history, Platform usage)
• Geolocation data
• Professional information (for Event Partners)

9. Children's Privacy

The Platform is not intended for children under 18. We do not knowingly collect personal information from children under 18. If we learn we have collected such information, we will delete it promptly.

If you believe a child has provided us with personal information, please contact us at privacy@hellobackdrop.com.

10. International Users

Backdrop is based in the United States. If you access the Platform from outside the U.S., your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from your country.

By using the Platform, you consent to the transfer of your information to the United States.

For users in the European Economic Area (EEA) or United Kingdom, we rely on: your consent, performance of a contract, legitimate business interests, and legal obligations.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy with a new "Last Updated" date
• Sending an email notification (for material changes)

Your continued use of the Platform after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices: