Privacy notice

Data and purposes

Account and access: email, name, avatar, sign-in identifier, language and settings enable authentication, your account and the purchased service. The basis is performance of the contract and steps you request before it.

Learning: goals, progress, lesson position, drafts, attachments, versions, answers, simulations, reflections, grades, mentor reviews and certificate records provide learning, feedback and evidence of completion. The basis is performance of the contract.

Payments: provider customer/order identifiers, amounts, currency, billing and subscription state, and refunds support access and billing administration. The payment provider handles card details. Contractual necessity and applicable legal duties are the bases.

Operational and security records include request metadata, AI usage/cost, delivery status and security events. They support troubleshooting, abuse prevention and service security under our legitimate interests. You can object based on your circumstances.

Email and free resources

We store your email, selected language and request time to deliver a requested PDF. A single sample-lesson follow-up is sent only if you select its separate consent checkbox. You can withdraw consent through the link in the email. Declining the follow-up does not prevent requesting the PDF. Standalone lead and delivery data are deleted 30 days after the last PDF request.

Learning emails can be disabled in account settings or through their opt-out page. Essential purchase, access, certificate and service messages are separate. Resend provides delivery and delivery-status records.

AI and human assessment

Submitted text and necessary task/conversation context are sent through Vercel AI Gateway to the configured model provider, currently Anthropic. Outputs and grades are stored with your account. Technical identifiers and free text may contain personal data; avoid unnecessary sensitive or third-party information.

AI assesses practice work and makes the first final-project classification. Borderline cases go to a human mentor. The consequence is learning progression and the private Academy certificate; we do not make employment decisions about you. Request a human review or explanation at gabor@backlog.hu.

Public portfolio and verification

Your portfolio remains private until you enable sharing. Publication makes your chosen profile name, capstone and shared work accessible to others. Search indexing has a separate setting. You may turn sharing off, but we cannot directly remove other people's prior copies or external search caches.

A certificate code permits verification of the credential. After account deletion, verification shows a non-identifying deleted state.

Providers and international transfers

Clerk handles identity; Neon stores application data; Vercel hosts the application, Blob files and AI Gateway; Anthropic generates requested AI feedback; Resend delivers emails; Polar and its payment partners handle checkout, billing and payment duties. A mentor accesses work needed for review. Current provider notices are linked below.

Some providers may process data outside the European Economic Area. The processing and international-transfer safeguards in the provider agreements apply. Contact us for information about relevant transfers and safeguards. Polar may act as an independent controller for its payment and legal responsibilities.

Cookies, local recovery and retention

Cookies hold necessary sign-in sessions and language choices. Browser storage may retain recoverable drafts and display settings. Sign out on shared devices; browser storage can also be cleared locally. This notice does not enable advertising trackers on the platform.

Account learning records are retained while the account exists and as needed to provide the requested service. Account deletion initiates removal of learning records, files and the external account. Provider failures leave a retryable deletion job; recovery identifiers are removed once it completes.

A non-directly-identifying technical digest prevents a deleted sign-in identifier from being recreated by an old webhook. Necessary statutory billing records and legal-claim records may be retained by the relevant providers under applicable requirements. Restoring a backup must preserve deletion state. Account deletion does not override statutory retention of payment records.

Your rights

You can request access, correction, erasure, restriction and, where applicable, portability; object to legitimate-interest processing; and withdraw consent. Export and deletion are also available in settings. We verify identity proportionately and do not request unnecessary identification.

Contact gabor@backlog.hu. Under the GDPR we generally respond within one month and explain any justified extension. You may complain to the Hungarian National Authority for Data Protection and Freedom of Information (1055 Budapest, Falk Miksa utca 9–11.; ugyfelszolgalat@naih.hu; naih.hu), another competent supervisory authority or a court. We notify you of material changes to this notice.

Provider notices

• Clerk
• Neon
• Vercel
• Anthropic
• Resend
• Polar

Provider and contact

Backlog Fejlesztő és Tanácsadó Korlátolt Felelősségű Társaság
2233 Ecser, Szent István utca 41., Magyarország
Company registration: 13-09-242820
Tax number: 32900112-2-13

Halmosi Gábor · gabor@backlog.hu · +36 30 831 5775