Legal

Privacy Policy

What personal data Backed collects, why, who we share it with, how long we keep it and the choices you have.
v1.0Updated 6 October 2026

01Who we are#

SolaraX Markets FZCO, trading as Backed (“Backed”, “we”, “us”) is the controller of your personal data, located at Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates. We process personal data under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and, where it applies to you, the EU and UK GDPR. Contact us about anything in this policy at support@trybacked.io.

02What we collect#

  • Profile details: name, email address, country, billing address and phone number if you give it.
  • Purchases: what you bought, prices, discount and referral codes, payment status. Card details are handled by our card processor; we never see or store your full card number.
  • Crypto payments and payouts: wallet addresses and transaction references.
  • Trading activity: every order, position, balance and rule check on your Accounts, and your payout history.
  • Identity verification, before your first payout: identity document, a selfie and the verification result, collected by our verification provider.
  • Device and usage data: IP address, browser and device type, pages and features used, times, and security logs.
  • Marketing data: how you found us (for example an ad click or referral link) and your email preferences.
  • Messages you send to support and the content you post in social features.

03Why we use it, and on what basis#

  • To provide the Services: create your profile, issue and run Accounts, apply the rules, pay payouts and give support (performance of our contract with you).
  • To verify identity, prevent fraud, multiple accounting and market abuse, and keep the platform secure (legal obligation and legitimate interests).
  • To keep records we are required to keep, such as payment and tax records (legal obligation).
  • To measure and improve the Services with our own first-party analytics (legitimate interests).
  • To measure our advertising and send marketing, where you have agreed or the law allows (consent or legitimate interests). You can opt out at any time.

Our rules engine decides automatically whether an Account passes, breaches or qualifies for a payout, using the published rules. Payout reviews and any action for prohibited conduct are checked by a person, and you can ask for any automated decision to be reviewed.

04Who we share it with#

We share personal data only with service providers that help us run Backed, under contracts that require them to protect it and use it only on our instructions, and with authorities where the law requires. Our providers include:

  • Hosting and databases: Supabase, Railway and Vercel.
  • Payments: our card processor and our own crypto payment system.
  • Identity verification: Veriff.
  • Customer records and email: WooCommerce and our email delivery provider.
  • Advertising measurement, only with your consent where it is required: Google (Tag Manager, Analytics, Ads) and Meta.
  • Fonts: Adobe Fonts, which receives your IP address when it delivers the fonts this site uses.

We do not sell your personal data.

05International transfers#

Our providers may process data outside the UAE and outside your country, including in the United States and the EU. Where the law requires it we rely on approved safeguards such as standard contractual clauses.

06How long we keep it#

  • Profile, Account and trading records: while your profile is open and 7 years after it closes.
  • Payment and payout records: 10 years.
  • Identity verification records: as long as required by anti-money-laundering rules.
  • Support messages: 3 years after the last message.
  • Security logs: 90 days, longer if needed for an investigation.
  • Marketing data: until you withdraw consent or opt out.

After that, data is deleted or anonymised.

07Your rights#

Depending on where you live, you can ask to access, correct, delete, restrict or receive a copy of your personal data, object to processing based on legitimate interests or to direct marketing, and withdraw consent at any time. Email us from the address on your profile; we reply within 30 days and may need to confirm your identity first. Some data must be kept for legal reasons even if you ask us to delete it. You can also complain to the UAE Data Office or your local data protection authority.

08Security#

Data is encrypted in transit and at rest, access is limited to staff who need it and every staff action is logged, and staff accounts use two-factor sign-in. No system is completely secure, so please use a strong password and turn on two-factor sign-in for your profile. If a breach puts your rights at risk we will tell you and the regulator as the law requires.

09Children#

Backed is only for adults. We do not knowingly collect data from anyone under 18 and delete it if we find out we have.

10Cookies#

How we use cookies and similar technologies, and how to choose, is in our Cookie Policy.

11Changes to this policy#

We will update this page when our practices change, and tell you by email or in the app about material changes.