Privacy Policy
This page is maintained by Toby the Doby, LLC ("we", "us") to explain how Back & Forth ("the Service") handles your information. It reflects current app-visible practices and is not a certification. Contact hello@backandforth.ai with questions.
1. What we collect
- Account data. Email address and authentication identifiers when you sign in (email link or Google sign-in).
- Debate content. The questions, clarifications, and any files you submit; the transcripts and reports the Service generates for you.
- Usage data. Basic operational logs (timestamps, credit usage, error traces) needed to run the Service.
- Billing data. When you purchase credits, payment is processed by Stripe. We receive purchase confirmations; we do not store full card numbers.
2. How we use it
- Run the debates and deliver the synthesized report back to you.
- Maintain your account, credit balance, and history of past debates.
- Detect abuse, debug issues, and improve the Service.
- Communicate operational updates related to your account.
We do not sell your personal information.
3. Third-party AI providers
To run a debate we send your prompt (and any files you attach) to the AI providers selected for that debate. These currently include OpenAI, Anthropic, Google, xAI, DeepSeek, and Perplexity. Each provider processes the request under its own terms and privacy policy. Do not submit information you are not authorized to share with third-party AI providers.
4. Sub-processors we rely on
- A major cloud hosting provider — hosting, authentication, database, and file storage. Named on written request to privacy@backandforth.ai.
- Stripe — payment processing.
- Email delivery provider — transactional email.
- The AI providers listed in Section 3.
5. Retention and deletion
Uploaded images and files are automatically deleted 30 days after upload. You can delete them sooner from the thread page.
Debates and account data are retained for as long as your account is active. You can delete individual debates from the sidebar and export or delete your entire account from Settings. Backups and operational logs may persist for up to 30 days after deletion and are then overwritten.
6. Cookies and analytics
We use cookies and similar storage strictly to keep you signed in and to remember in-progress prompts between pages. We may add lightweight product analytics in the future; if we do, we will update this page.
7. Security
Traffic to the Service is encrypted in transit (HTTPS). Access to your account requires authentication. No online service can promise perfect security; report any suspected vulnerability to security@backandforth.ai.
8. Your choices and rights
You can export a JSON copy of your data or permanently delete your account at any time from Settings. Depending on where you live, you may also have rights under applicable privacy law (access, rectification, erasure, portability, restriction, objection, and the right to complain to a data-protection authority). Email privacy@backandforth.ai with any request and we will honor it to the extent required by law.
9. Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from them.
10. Changes
We may update this policy as the Service evolves. Material changes will be reflected in the "Updated" date at the top of this page.