1. Overview & Scope
Welcome to BackendFlow (“we,” “our,” or “us”). BackendFlow operates the platform accessible at backendflow.in and associated subdomains, web applications, coding sandboxes, interactive code compilers, and learning management services.
This Privacy Policy applies to all students, software developers, community members, and visitors who access or register for our services. By accessing or using BackendFlow, you consent to the collection, storage, and processing of your information in accordance with this Policy.
2. Information We Collect
We collect information necessary to provide you with access to our backend curriculum, cloud compilers, subscription features, and personalized certificates:
A. Personal Information You Provide Directly
- Account Data: Name, email address, password hashes (safely salted with bcrypt), and avatar profile picture.
- OAuth Profile Data: If you sign in via Google or GitHub, we receive your public profile identifier, name, and verified email address.
- Billing & Invoicing: Billing name, transaction reference IDs, and subscription tier. We do not store raw credit card numbers or UPI MPINs; payments are securely tokenized by certified payment gateways.
B. Learning & Technical Sandbox Activity
- Course progression status, completed lessons, coding challenge submissions, and earned certificates.
- Source code snippets submitted into our interactive sandboxes (e.g. Go, Java, Python, Node.js) for evaluation and test-case execution.
- Community interactions, such as comments posted on technical blog articles.
C. Automated Device & Telemetry Data
- IP address, browser type, operating system, device screen resolution, referring URLs, and session timestamps used for security audits and anti-fraud rate limiting.
3. How We Use Your Information
We process your data for transparent and legitimate business purposes, including:
- Platform Delivery: Providing access to courses, live sessions, quizzes, and digital credentials.
- Code Execution: Compiling and executing sandboxed code solutions safely.
- Transactional Communications: Sending authentication OTPs, receipts, and security alerts.
- Security & Abuse Prevention: Guarding against brute force attacks, scraping, and malicious bot activity.
5. Third-Party Service Providers
We partner with industry-standard, SOC-2 and ISO-certified infrastructure providers who process data strictly under our instructions:
MongoDB Atlas cloud clusters with encrypted storage-at-rest and automated backups.
Hostinger Enterprise SMTP and encrypted mail relays for system notices and OTPs.
PCI-DSS compliant payment aggregators for processing ₹599 Pro subscription plans.
6. Data Security & Retention
We implement multi-layered engineering safeguards to protect your information:
- Encryption in Transit: 256-bit TLS/SSL encryption across all platform endpoints and API requests.
- Cryptographic Password Hashing: Passwords are never stored in plaintext; they are hashed using high-cost bcrypt algorithms.
- Access Controls: Strict role-based database permissions ensuring only authorized personnel have access to core databases.
- Retention: We retain account data as long as your account remains active. If you request account closure, we securely delete or anonymize your data within 30 days, except records required for tax and legal compliance.
7. Your Privacy Rights
Depending on your jurisdiction (including India, EU GDPR, and other applicable data protection regulations), you enjoy the following rights:
8. Children's Privacy
BackendFlow is designed for software developers, university students, and adult professionals. We do not knowingly collect personal information from children under the age of 13. If you believe a minor has provided us with personal data without parental consent, please contact us immediately so we can promptly erase the information.
9. Contact & Grievance Officer
If you have any questions, grievances, or requests regarding this Privacy Policy or your personal data, please contact our dedicated Data Protection & Grievance Desk: