Privacy Policy

Last updated: August 11, 2026

This Privacy Policy explains how BatchBot collects, uses, stores, and protects your information when you use our service. We are committed to protecting your privacy and being transparent about our data practices.

1. Information We Collect

Account Information:

  • Email address (used for login and account identification)
  • Password (stored as a secure hash, never in plain text)
  • First name (optional, for personalization)
  • TikTok username (optional, used for video watermarking)

Content You Upload:

  • Product images
  • Clips (background videos)
  • Text overlays and product descriptions
  • AI prompts for video generation

Payment Information:

Payment details (credit card numbers, billing address) are collected and processed directly by Stripe. We do not store your full payment information on our servers. We receive a Stripe customer ID and subscription status to manage your account.

Usage Data:

  • Credit usage and transaction history
  • Video generation history
  • Session information for authentication
  • Product analytics events (pages visited and actions taken in the app), and diagnostic server logs that can include your email address — see Cookies, Analytics, and Advertising and Data Retention below

Instagram Messaging Information:

  • A sender-scoped Instagram identifier supplied by Meta
  • Your Instagram username, when Meta makes it available
  • Messages, reels, images, and links you send to the official BatchBot Instagram account
  • The association between your Instagram conversation and your authenticated BatchBot account
  • Short-lived pairing records and webhook message identifiers used to prevent duplicate processing

Linking an Instagram conversation does not give BatchBot access to your Instagram account, password, inbox, followers, or other conversations. BatchBot operates its own Instagram Professional account and processes messages that you choose to send to it.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the BatchBot service
  • Process your video generation requests
  • Manage your subscription and credit balance
  • Authenticate your identity and secure your account
  • Send important service-related notifications
  • Debug issues and improve service reliability
  • Associate an Instagram conversation with the correct BatchBot account when you request linking
  • Respond to messages you initiate with the official BatchBot Instagram account

We do not sell your personal information to third parties. We do not use your content for advertising purposes.

3. Third-Party Services

BatchBot uses the following third-party services that may process your data:

ServicePurposeData Shared
Meta / InstagramInstagram messaging and delivery of customer-initiated conversationsMessages and media exchanged with BatchBot, plus identifiers needed to deliver replies
OpenAI (via OpenRouter)AI image generation, transcription, and text processingText prompts, product images, video audio
StripePayment processingPayment details, email, billing info
Cloudflare R2Cloud file storageUploaded images and videos
Supabase (PostgreSQL)Database hostingAccount data, usage records
RailwayApplication hosting and server logsRequests to the service, and diagnostic logs that can include your email address (see Data Retention below)
PostHogProduct analytics and error reportingEmail address, plan, credit balance, subscription status, pages visited, and in-app events
TikTokAdvertising measurement and conversion trackingAdvertising identifiers and conversion events (for example signing up or subscribing). Loaded only when advertising measurement is enabled.
ResendTransactional email deliveryYour email address and the contents of the message being sent to you

Each third-party service has its own privacy policy. We encourage you to review them:

4. Cookies, Analytics, and Advertising

Session cookies. BatchBot uses session cookies to keep you logged in. These are essential to the service and are not used for advertising.

Product analytics. We use PostHog to understand how the product is used and to capture errors, so we can fix problems and decide what to build. PostHog receives the pages you visit and the actions you take in the app, together with your email address, plan, credit balance, and subscription status, so that activity can be tied to your account. PostHog sets its own identifiers, including cookies or equivalent browser storage. Analytics requests are sent through a path on our own domain for reliability; they are still processed by PostHog.

Advertising measurement. When advertising measurement is enabled, we load the TikTok advertising pixel and send TikTok conversion events (for example, completing a signup or starting a subscription) so we can measure whether our ads work. This uses advertising identifiers and event data. We do not sell your personal information, and we do not use the images, videos, or prompts you upload for advertising.

Advertising trackers load from the advertiser's own domain and can be blocked with your browser's privacy settings or an ad-blocking extension. Product analytics are served from a path on our domain, so those tools may not block them. To request deletion of the analytics data associated with your account, contact us using the details in the Contact section below; the service will continue to work.

5. Data Storage and Security

We take reasonable measures to protect your information:

  • Passwords are hashed using bcrypt before storage
  • Sessions are managed securely with HTTP-only cookies
  • Payment data is handled entirely by Stripe (PCI-compliant)
  • Files are stored in encrypted cloud storage
  • All connections use HTTPS encryption

While we implement industry-standard security practices, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

  • Account data: Retained for as long as your account is active
  • Uploaded content: Stored for as long as your account is active. You can delete individual items at any time.
  • AI-generated videos: Available for review and saving after generation. Unsaved videos may be cleaned up periodically.
  • Batch output videos: Temporary; automatically deleted after download
  • Inactive accounts: Data may be deleted after 12 months of inactivity
  • Instagram pairing links: Links expire after 60 minutes and expired pairing records are periodically removed
  • Instagram webhook identifiers: Retained briefly to prevent duplicate replies and removed after approximately two days
  • Diagnostic logs: Our servers write logs so we can investigate faults and support you. These can include your email address — for example when a signup or a transactional email fails — along with the request that failed. They are used only to operate and troubleshoot the service, are never used for advertising, and are deleted automatically after 30 days, which is the log retention window provided by our hosting platform. Because these logs also record attempts that never created an account, they may briefly contain an email address belonging to someone who is not a BatchBot user.
  • Analytics data: Product analytics held by PostHog are retained according to that provider's retention settings. You can ask us to delete the analytics data associated with your account at any time.

7. Your Rights

You have the right to:

  • Access your data: View the personal information associated with your account
  • Delete your content: Remove uploaded images, videos, and AI-generated footage at any time
  • Close your account: Request deletion of your account and associated data
  • Export your data: Download your generated videos and content

To exercise these rights, review our Data Deletion Instructions or email turner@batchbot.io.

8. Children's Privacy

BatchBot is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete that information.

9. International Users

BatchBot's servers are located in the United States. If you access the service from outside the United States, your information may be transferred to and processed in the United States. By using the service, you consent to this transfer.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via email or through the service. The "Last updated" date at the top of this page indicates when the policy was last revised.

11. Contact

If you have questions or concerns about this Privacy Policy or our data practices, please email turner@batchbot.io.