Privacy Notice for the free starter scan
Version 0.2.2, development stage | October 6, 2026
This notice explains how BackBond handles information when you request a free starter scan. The service is available only to users who are at least 18 years old.
Information BackBond handles
BackBond receives your report email address, agent name, agent endpoint, connection type, authentication details, connection settings, required confirmations, and whether you opted out of product-improvement use.
BackBond supplies up to 100 single-turn test messages. The scan runs against the agent endpoint you provide. Your agent returns responses to those messages. BackBond receives the responses and uses them to run the scan and prepare your report. The intake service stores the endpoint host rather than the full endpoint URL. It also stores the report email, agent name, connection type, scan and report identifiers, service status, timestamps, test messages and responses, verdicts, errors, test-family labels, and scan-pack version. A connection test may send one additional request and does not start the scan.
BackBond may also receive technical data generated when you use the site or service, such as an IP address, browser or device information, request time, and security events.
How BackBond uses information
BackBond uses information to check the submitted connection, run the scan, prepare and email the private report or report link, enforce scan limits, troubleshoot failures, protect the service, and meet legal obligations.
Unless you opt out, BackBond keeps a copy of the scan's test messages, your agent's responses and the results, without your email address, credentials, endpoint or agent name, and uses it to improve its tests and scoring. This copy is kept after the scan record is deleted. To opt out, uncheck the product-improvement box before starting the scan, or email info@backbond.ai later and BackBond will delete the copy.
Credentials and sensitive information
The intake implementation passes authentication material to the scanner but does not write it to the intake database. It also avoids placing submitted endpoints, keys, and prompts in application error responses. BackBond does not promise a specific retention or deletion period for credentials or other information in connected systems, processes, or providers.
Use test credentials with the least access needed. Do not submit personal data, confidential information, regulated data, or production credentials unless necessary for the authorized test and you have the right to provide them.
When information is disclosed
BackBond may disclose information to service providers that host the service, run scans, deliver report emails, or support security and operations. BackBond uses an external email delivery service to send report emails or links. These providers may process information in other countries where they or their infrastructure operate.
BackBond may also disclose information when required by law, to protect users or BackBond, or in connection with a merger, financing, reorganization, or sale of assets, subject to applicable law.
Retention
BackBond stores scan and report records in a database. Scan records are deleted after 180 days, or sooner on request to info@backbond.ai. Report links stop working at the same time. The de-identified product-improvement copy described above is kept after the scan record is deleted unless you opt out. Email delivery records, security logs, acceptance records, and backups may be kept longer for operational, security, and legal needs.
Your choices and rights
You may contact info@backbond.ai to ask about your information or request access, correction, or deletion. BackBond will verify and respond to requests as required by applicable law. BackBond may keep information where permitted or required for security, recordkeeping, dispute resolution, or legal compliance.
International processing
Information may be processed in countries other than where you live, by BackBond and its service providers where they or their infrastructure operate.
Security
BackBond uses administrative, technical, and organizational measures designed to protect information. No system is completely secure. Contact support@backbond.ai if you believe a report link, credential, or account information has been exposed.
Changes and contact
BackBond may update this notice as the service or applicable requirements change. The current version will show its effective date.
General, privacy, and legal questions or requests: info@backbond.ai
Support: support@backbond.ai