1. Data Controller Identification
The entity responsible for processing personal data collected through the BackSoon platform is:
Corporate Website: https://texhco.com/ ↗
Privacy & Data Protection Email: hello@backsoon.us
2. Categories of Data Collected
BackSoon is designed under the principle of data minimization (Privacy by Design). We distinguish two user categories:
| Profile | Data Gathered | Purpose & Legal Basis |
|---|---|---|
| Local Merchants | Owner name, business name, work email, phone number, and Stripe customer token for subscriptions. | Account administration, billing execution, hardware stand shipping, and merchant portal access. |
| End Consumers (Pass Holders) | First name (for pass personalization), anonymous Apple APNs / Google device tokens, and stamp transaction history. | Loyalty card issuance in Apple & Google Wallet, lock-screen stamp updates, and reward redemption. |
3. Apple & Google Wallet Push Permissions
When an end customer adds a BackSoon loyalty pass to Apple Wallet or Google Wallet, explicit consent is granted to receive lock-screen push notifications regarding stamp increments, unlocked rewards, or infrequent win-back reminders.
Customers can revoke notification permissions at any time directly in the Apple Wallet or Google Wallet app settings, or simply delete the pass, which permanently severs device push tokens from our servers.
4. Technical Security & Encryption
- Database Row Level Security (RLS): Multi-tenant database isolation ensures each store can only access its own customers and scan metrics.
- Cryptographic Pass Signing: Apple .pkpass packages are cryptographically signed using Apple PassKit developer certificates and RSA keys. Google Wallet passes use signed RS256 JWT tokens.
- Encrypted Transmission: 100% of network traffic operates over HTTPS with TLS 1.3 encryption.
5. Website Analytics & Cookies
The public pages of backsoon.us (home, sign-up, contact, video and legal pages) use Google Analytics 4, a service of Google LLC, to understand how visitors find and use our website: pages viewed, approximate location, device and browser type, and the site that referred them. Google Analytics sets cookies in your browser to tell visits apart.
We do not use analytics in the merchant portal, the staff scanner, or the pages where customers add their pass to Wallet, and we never send names, emails, phone numbers or pass details to Google Analytics. You can opt out by blocking cookies in your browser settings, using the Google Analytics Opt-out Browser Add-on, or emailing us.
6. Your Rights (GDPR & CCPA Compliance)
Users and merchants have the right to access, rectify, port, restrict, or request permanent erasure of their personal information at any time.
To exercise any of these rights, email our team at hello@backsoon.us specifying your store or pass details. We respond to all verified requests within 3 business days.