Privacy policy
How Backly collects and uses information on this website and in the Backly app.
Last updated: November 3, 2026
1. Who we are
Backly is a service of Sorkin Capital LLC ("we", "us"). This policy explains what information we collect on getbackly.com and in the Backly app, why we collect it, and the choices you have.
Questions about privacy: email us at a3sorkin@gmail.com.
2. This website: early-access and rep sign-ups
When you fill in a form on this website, we collect what you type: for early access, your name, business name, email, phone, business type, city, state, number of locations and any message; for the rep application, your name, email, phone, city, state, sales experience and any note.
We also record when the form was sent, which page it came from, and any campaign tags in the link you followed.
We use this only to reply to you, to set up your account if you sign up, and to understand which pages and campaigns bring people to us. It is stored in a private Google Sheet and a copy is emailed to our own inbox.
If you take the quick quiz, we save your answers (your business type, how you reward regulars today, what would help most, and the business name if you type one) with a random number, whether or not you finish. If you then sign up, your answers are attached to your sign-up. We use them to follow up and to improve the questions.
This website does not set cookies and does not use analytics or advertising trackers.
3. Business owners and staff using the app
To run a business's account we collect the business's name, address, phone and email, and for each staff member a name, email and PIN. PINs are stored only in scrambled (hashed) form, so we cannot read them.
The app uses one cookie to keep staff signed in. The app cannot work without it.
Owners receive a monthly results email, which they can switch off at any time.
To protect a team login, we can ask for a second step with an authenticator app. We keep the authenticator secret encrypted and the recovery codes only in scrambled (hashed) form.
When a business orders its starter kit, we keep the shipping address and a contact name so we can mail it.
4. Customers who join a business's loyalty card
When you join a business's loyalty card, we collect your name, email and preferred language, and we keep a record of your stamps, rewards and coupons for that business. We do not collect your location.
We handle this information on behalf of the business whose card you joined. That business decides how its loyalty program works, and its own privacy notice applies too. Each business's customer list is kept separate and is never combined with another business's list or sold.
Your card is saved in Google Wallet on your phone (or in Apple Wallet, once it is available), and updates to it pass through those wallet services. You also get a private web link to your card that works without a wallet app.
The business may send updates and offers to your wallet card, at most 3 a week. We send marketing email only if you ticked the separate box agreeing to it, and every email has an unsubscribe link. When you give or withdraw that agreement, we record the wording you saw, your choice, the time and your IP address, as proof.
If the business has switched it on, the day after your first visit you'll get one request to leave a Google review. Everyone gets the same request and no reward is offered for reviews.
5. Sales reps
For sales reps we keep a name, email, a PIN stored only in scrambled form, and a referral code. We track which businesses signed up with each rep's code so we can prepare their commission statements For reps in training, we also keep their application status, whether their contractor agreement is signed, and their progress and quiz results in the training sessions.
6. Records kept for safety and audits
To keep accounts safe and to resolve disputes, we keep a record of who added each stamp or reward and when, and of the actions owners and our team take in the app.
We briefly count failed sign-in attempts and sign-up attempts from each internet address to block break-in attempts and spam.
7. Payments
Businesses pay through Stripe's secure checkout. Your card details go straight to Stripe and we never see or store them. We keep only Stripe's reference numbers for your account and the amount and date of each payment.
8. Services we use
We share information only with the companies that help us run Backly, and only what they need to do their job: Google (website sign-ups and email), Stripe (payments), and Apple and Google (wallet cards). Vercel (hosting), Supabase (our database) and Resend (sending email).
We do not sell personal information, and we do not share it for advertising.
9. How long we keep information
We keep information while an account is active and for as long as we need it afterward for legal, tax, accounting and safety reasons.
When a business cancels, its customers' cards stay readable for 30 days but can't collect new stamps.
10. Your choices and rights (including California and other state privacy laws)
You can ask us to show you, correct or delete the personal information we hold about you, and you won't be treated differently for asking. Email a3sorkin@gmail.com and we'll respond within the time the law requires. We may need to confirm who you are first.
If you joined a business's loyalty card, you can also ask that business directly. We'll help the business respond.
You can unsubscribe from marketing email at any time using the link in any email, and you can delete your card from your wallet whenever you like.
11. Children
Backly is meant for businesses and adult customers. It is not directed at children under 13, and we don't knowingly collect their information. If you think a child has given us information, contact us and we'll delete it.
12. Changes to this policy
If we change this policy, we'll post the new version here and update the date at the top. If a change is significant, we'll tell business owners by email before it takes effect.