Privacy policy

You may email us at hello@backpath.io. If you do, we receive whatever you include in that message.

If you use checkout, you provide contact and billing details in the Back Path form: name, email address, phone number, mailing address, and optional email or SMS update preferences. Those details are used to complete Stripe’s billing information for the payment method you are setting up.

The public login form accepts an email address and password so the interface can behave like a member entrance. Submitted passwords are not stored, logged, or sent to analytics, and the form does not create an account or grant access.

The intake questionnaire is a safety and fit screen. Your browser may keep a short status record in session storage (for example, whether the screen was completed, passed, or flagged a concern). That record is used to continue the funnel in the same browser session. It is not a medical record we retain on our servers as part of this website’s current design.

Checkout currently collects a payment method through Stripe-hosted fields. Back Path uses Stripe to create a SetupIntent so a card or other supported method can be verified without Back Path charging you on this website.

Card number, CVC, and other raw payment-field data are entered in Stripe-hosted fields. Back Path does not directly receive those raw card details through those hosted fields.

Name, email, phone, and address from the checkout form are passed to Stripe as billing details associated with the payment method. Stripe is a third-party payment processor with its own privacy practices.

When a SetupIntent succeeds, this website may store a conversion record used for internal marketing-test reporting. That record includes a Stripe SetupIntent identifier, the selected payment option (upfront or installments), a modeled program amount, and a timestamp. It does not include card numbers, CVC, or the checkout form’s email address.

Your browser may also keep a short checkout-intent record in session storage, such as the payment option you selected, so the flow can continue in the same session.

Like most websites, our hosting environment may process standard technical data such as IP address, browser type, and request logs as part of delivering the pages you request.

This site includes a lightweight analytics stub that records event names and, in development, may print a page path to the browser console. In this phase, those events are not sent to advertising platforms, Meta Pixel, or a production analytics vendor.

We use information to:

• operate and improve the website, intake, and checkout flows
• respond to messages you send us
• set up a payment method through Stripe
• understand whether checkout completed, for internal test reporting
• protect the site and investigate abuse or errors

We do not sell personal information.

We use service providers that process information on our behalf, including Stripe for payment-method setup, the infrastructure that hosts this website and (when configured) conversion records, and email when you write to us. Those providers receive only what is needed to perform their role.

We do not claim that information is never shared. Necessary processors receive the data required to run checkout, hosting, and related operations.

Payment fields are hosted by Stripe. Back Path does not claim PCI certification of its own. Stripe’s terms and privacy policy apply to information Stripe processes.

We take reasonable steps to limit access to conversion records and server configuration. This policy does not claim a specific encryption standard, audit, or security certification.

Session storage records last for the browser session. Emails you send us are retained as needed to respond. Conversion records, when storage is configured, are kept for internal reporting until they are deleted as part of ordinary operations. Stripe retains payment-method data according to Stripe’s practices.

You can stop using the site, clear your browser storage, and decline to complete checkout. You can email hello@backpath.io to ask what we hold from correspondence or conversion reporting, or to request that we delete information we control. We may not be able to delete information held only by Stripe or other processors.

Back Path is not directed at children, and this website is not intended for anyone under 18. We do not knowingly collect personal information from children through this site.

We may update this page as the product changes. The “Last updated” date at the top will change when we do. Continued use of the site after an update means the revised policy applies to that later use.

Questions about this policy: hello@backpath.io.

Related pages: Terms of use and Medical disclaimer.