Privacy Policy
Last Updated: March 20, 2026
The Simple Version
Backchannel helps you discover meaningful professional connections. We use AI to match you with people who can help you and whom you can help. We'll never sell your data. Every connection requires your explicit approval. You're always in control.
This policy explains what we collect, why, and what rights you have. We've tried to keep it readable, but if anything is unclear, email us and we'll explain it in plain language.
Who We Are
Backchannel is operated by Tiny Mammoth Inc. ("we," "us," or "our"), located at 5900 Balcones Drive, STE 100, Austin, TX 78731.
For privacy questions, contact us at legal@tinymammoth.xyz.
For EU/EEA users: Pursuant to Article 27 of the GDPR, we have appointed DPO Europe GmbH as our EU Representative. You may contact them at: Auguste-Viktoria-Allee 20A, 13403 Berlin, Germany | info@data-privacy-office.eu. If you have unresolved concerns, you have the right to lodge a complaint with your local data protection supervisory authority.
What Is Backchannel
Backchannel is an AI-powered professional networking service. When you interact with Backchannel, you are communicating with an AI concierge, not a human. Our AI agent facilitates introductions, surfaces opportunities, and helps you build professional relationships.
You can interact with Backchannel primarily via SMS text messaging, and in the future through other channels such as our website, mobile applications, WhatsApp, or third-party AI assistants (collectively, the "Service").
How You Join Backchannel
There are two main ways people join:
You Text Us Directly
If you hear about Backchannel and text our number, we'll ask you some questions to set up your profile. We'll ask you to verify your work email and accept these terms before you're fully active.
An Event Host Invites You
When you register for a professional event that partners with Backchannel, the event host may share your registration information (name, title, company, email, phone number) with us. The host collects your explicit, separate consent to receive SMS from Backchannel during their event registration. This is a distinct opt-in, not bundled into general registration.
We'll send you an introductory text explaining who we are and why you're hearing from us. You choose whether to continue. If you do, we'll ask you to confirm your details and accept our terms directly. If you don't respond or reply NO, we won't contact you again for that event.
You can reply STOP to any message at any time to immediately opt out.
Information We Collect
Information You Provide
- Name and professional title
- Email address and phone number
- Company or employer
- Professional goals, preferences, and interests
- Your messages and responses to our AI concierge
- Feedback about connections and introductions
Information Event Hosts Provide
When an event host uploads an attendee list, they may share your name, email, phone number, company, title, and any custom fields collected during event registration. We process this data under the consent the host collected from you during registration, and under our Data Processing Agreement with the host.
Information We Obtain From Other Sources
To improve the quality of your matches, we enrich your profile using third-party data sources. This may include:
- Professional data from business databases
- Company information from public records, news articles, and press releases
- Professional activity from publicly available sources (published articles, conference appearances, press mentions)
Important: Enrichment data never overwrites information you've confirmed. Your profile, as you've approved it, is always authoritative. Enrichment data is used in the background to improve match quality.
Profile enrichment uses only publicly available information, such as professional databases, news articles, published content, and public conference records, never private or purchased third-party data. We limit enrichment to data that is relevant to professional context and necessary to improve matching quality. We rely on the disproportionate effort exemption under GDPR Article 14(5)(b) for enrichment data obtained from public sources; this processing is disclosed in this privacy policy and communicated at the point of first contact.
Information We Collect Automatically
When you interact with our website or future mobile applications, we may collect:
- Device type and operating system
- How you use the service (pages visited, features used)
- IP address and general location
- Browser type and technical identifiers
When you interact via SMS, we collect your phone number, message content, and timestamps.
How We Use Your Information
We use your information for the following purposes:
To Provide the Service
- Match you with relevant professional connections using our AI matching engine
- Facilitate introductions between you and other members
- Operate our AI concierge to communicate with you via SMS and other channels
- Process and route community requests to relevant experts
To Improve Matching Quality
- Analyze your messages to extract professional knowledge signals (topics you know about, expertise you've demonstrated); we store summaries, never raw message text
- Enrich your profile with third-party professional data
- Calculate a Reputation Score based on your engagement (see below)
To Communicate With You
- Send SMS messages about connection opportunities, event updates, and service notifications
- Proactive outreach when we've identified a high-value opportunity for you
- Follow up on introductions and gather feedback
To Operate and Improve the Service
- Monitor service quality and debug issues
- Analyze usage patterns to improve matching algorithms
- Enforce our terms and prevent abuse
AI and Automated Processing
Backchannel is an AI-powered service. Here's what that means for your data:
- AI concierge: When you text Backchannel, you're communicating with an AI agent powered by large language models (currently Anthropic's Claude). A human is not reading or writing your messages in real time.
- Automated matching: Our matching engine uses AI to score potential connections based on your goals, expertise, and professional context. Each potential match is scored from both sides; we only surface opportunities where there's mutual relevance.
- Knowledge extraction: After conversations, an AI process analyzes your messages to identify professional expertise and interests. We store only normalized summaries (e.g., "experienced in programmatic advertising"), never your raw message text, in our matching database.
- Message processing: We may temporarily process the content of your messages to operate the Service and extract relevant professional signals. Our AI service providers process messages on our behalf and do not retain or use them to train their models.
- Reputation scoring: We calculate a Reputation Score (0–100) based on five factors: how quickly you respond, how helpful your connections find you, how actively you participate, the diversity of your interactions, and how consistent your engagement is over time. The score is based in part on feedback from other users and your interactions with the Service. While automated systems help calculate and apply the score, it is not based solely on automated decision-making. This score affects which opportunities you see and their priority.
Your rights regarding automated decisions: Under GDPR, you have the right not to be subject to decisions based solely on automated processing that produce significant effects on you. You may request human review of any automated decision, an explanation of the logic involved, and the ability to contest the decision. Contact us at legal@tinymammoth.xyz to exercise these rights.
If you object to automated profiling, we will accommodate your request to the extent possible. Some features of the Service, such as personalized matching, rely on automated processing and may be limited if you opt out, but your account will remain active and you can still use the Service.
How Professional Connections Work
Double-blind until mutual acceptance. No one sees your information without your consent, and you only hear about connections who've already expressed interest in connecting with you.
- You're always asked first. When our system identifies you as a potential match for someone's request, we ask if you're interested before sharing anything about you. If you decline, the other person never knows you were considered.
- You never experience rejection. When someone is open to connecting with you, we let you know. You only hear about matches who've already said yes.
- The platform absorbs all the rejection. We create a positive experience for everyone by handling the matchmaking process privately.
What We Don't Do
- We never sell your personal information to anyone
- We don't share your contact details without your explicit approval
- We never make introductions on your behalf without your consent
- We don't display your profile in a directory or allow other users to browse or search for you
- We don't use your data for advertising to third parties
Legal Basis for Processing (GDPR)
If you're in the EU/EEA, we process your data on the following legal bases:
- Contract performance: Processing necessary to provide the Service, including matching, introductions, profile management, communications about your connections and opportunities.
- Consent: SMS communications (you can withdraw by replying STOP at any time); processing of data provided by event hosts (based on consent the host collected during registration, and your direct consent at onboarding).
- Legitimate interest: Enriching your profile with publicly available professional data to improve match quality; calculating your Reputation Score; analyzing usage to improve the Service; preventing abuse. See "Legitimate Interests" below for how we ensure proportionality.
- Legal obligation: Retaining consent records and audit logs for regulatory compliance.
Legitimate Interests
Where we rely on legitimate interests, we ensure that our processing is proportionate and respects your rights. In particular:
- The data we use is limited to professional and publicly available information
- Our service is opt-in and user-controlled; you approve all connections
- We do not expose your profile publicly or allow browsing
- You can object to profiling at any time
We have assessed that these uses do not override your fundamental rights and freedoms. A copy of our Legitimate Interest Assessment is available upon request.
SMS Text Messaging
Backchannel communicates primarily via SMS. By using the Service, you agree to receive text messages from us. Here's what you should know:
- Message frequency: Varies. We send messages when we have something valuable for you, including connection opportunities, event updates, or follow-ups. We have internal safeguards to prevent over-messaging.
- Message and data rates may apply. Standard carrier rates apply to messages you send and receive.
- Opt out: Reply STOP to any message to immediately stop all SMS communications. This is permanent until you re-initiate contact with us.
- Help: Reply HELP to any message for assistance, or contact us at legal@tinymammoth.xyz.
- Quiet hours: We will not send proactive messages during nighttime hours in your time zone. If you text us during those hours, we'll still respond.
Carriers are not liable for delayed or undelivered messages. We support major US carriers including AT&T, T-Mobile, and Verizon.
Service Providers and Data Sharing
We share your data with the following categories of service providers, all of whom are bound by data processing agreements:
- Cloud infrastructure: Google Cloud Platform (compute and hosting), Supabase (database)
- AI and machine learning: Anthropic (AI concierge and analysis)
- Communications: Twilio (SMS delivery)
- Data enrichment: Perplexity (professional profile enrichment)
- Web hosting: Vercel (website)
We do not sell your data. We share it only as necessary to operate the Service and as described in this policy. A current list of sub-processors is available upon request.
We may also share information if required by law, to protect our rights, or in connection with a merger, acquisition, or sale of assets (in which case you'd be notified).
How Long We Keep Your Data
We retain your data according to these schedules:
- Active accounts: Your information is retained while your account is active and you're using the Service.
- Account deletion: When you delete your account, we remove your personal information within 90 days, except where we're legally required to retain it.
- Event invitations without response: If you were invited via an event host but never responded, we stop contacting you 90 days after the event ends. Your data is anonymized 180 days after that.
- Opt-out (STOP): If you reply STOP, we immediately cease all communications. We retain limited information (your phone number) on a suppression list to comply with legal obligations and ensure we honor your opt-out request. This data is used solely for suppression purposes and is not processed for any other purpose. If you re-initiate contact with us, we will remove you from the suppression list and process your data according to these terms.
- Consent and audit records: We retain records of consent actions, opt-outs, and system decisions for 7 years for regulatory compliance.
- Anonymized data: We may retain anonymized, aggregated data indefinitely for analytics and service improvement. This data cannot be linked back to you.
Data Security
We use industry-standard security measures to protect your data, including encryption in transit and at rest, secure cloud infrastructure, and access controls. No system is perfectly secure, but we take your data protection seriously.
Breach notification: If we become aware of a data breach that affects your personal information, we will notify you and the relevant authorities in accordance with applicable law, including within 72 hours to EU supervisory authorities where required by GDPR.
Your Privacy Rights
You have control over your information. Here are your rights:
Everyone Gets These Rights
- Access: See what information we have about you, including your Reputation Score and its components
- Correction: Fix anything that's wrong
- Deletion: Remove your information from our systems
- Portability: Get a copy of your data in a standard, machine-readable format
- Stop SMS: Reply STOP to any message, or contact us to opt out of other communications
Additional Rights for EU/EEA Users (GDPR)
- Object to processing: Ask us to stop processing your data for certain purposes, including profiling
- Restrict processing: Limit how we use your data while we resolve a dispute or verify accuracy
- Withdraw consent: Change your mind about any consent you've given (reply STOP for SMS; contact us for other processing). Withdrawal doesn't affect processing done before withdrawal.
- Automated decision review: Request human review of automated decisions that significantly affect you, including matching and scoring decisions
- Lodge a complaint: You have the right to complain to your local data protection supervisory authority
- Data portability: Receive your data in a structured, commonly used, machine-readable format and transmit it to another controller
Additional Rights for California Users (CCPA/CPRA)
- Know what we collect: See the categories of information we gather and why
- Do not sell or share: We do not sell your personal information, and we do not share it for cross-context behavioral advertising. If this changes in the future, we will provide a "Do Not Sell or Share My Personal Information" mechanism.
- Limit use of sensitive information: Request that we limit our use of sensitive personal information to what's necessary to provide the Service
- No discrimination: We won't treat you differently for exercising your rights
How to Exercise Your Rights
Contact us anytime at legal@tinymammoth.xyz or by mail:
Tiny Mammoth Inc.
5900 Balcones Drive, STE 100
Austin, TX 78731
We'll respond within 30 days (one month for GDPR requests). For complex requests, we may extend by up to two additional months; we'll let you know within the initial period if needed.
Cookies and Tracking
Our website uses cookies and similar technologies. Here's what we use:
- Strictly necessary cookies: Required for the website to function (session management, security). Cannot be disabled.
- Analytics cookies: We use Google Analytics to understand how users interact with our website. Google Analytics operates using first-party cookies and does not use your data for cross-site advertising in our implementation. You can opt out of analytics cookies.
- Functional cookies: Remember your preferences. You can opt out of these.
Analytics cookies are only activated with your consent where required by law. We do not use advertising or tracking cookies. EU/EEA visitors will see a cookie consent banner and can decline non-essential cookies. You can also manage cookies through your browser settings.
International Data Transfers
Backchannel is based in the United States. If you are outside the US, your information will be transferred to and processed in the US.
When we transfer personal data outside the EEA, including to the United States, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission. We also assess the legal environment of recipient countries and implement additional safeguards where appropriate, such as:
- Data minimization (limiting the data shared)
- Contractual restrictions on use and retention
- Technical measures designed to protect data in transit and at rest
While no system can eliminate all risk, we take steps designed to ensure your data receives a level of protection consistent with EU data protection law.
For transfers from other jurisdictions, we comply with applicable data transfer requirements.
Children's Privacy
Backchannel is a professional networking service and is not directed at anyone under 18. We do not knowingly collect personal information from minors. If we learn that we've collected data from someone under 18, we will delete it promptly.
Changes to This Policy
We'll update this policy as we add features or as regulations evolve. For significant changes, we'll notify you via SMS or email before the changes take effect. Minor clarifications or formatting changes may be posted without individual notice. The "Last Updated" date at the top always shows when we last modified this policy.
Contact Us
Questions about privacy? We're here to help: legal@tinymammoth.xyz
Tiny Mammoth Inc.
5900 Balcones Drive, STE 100
Austin, TX 78731