Last updated: September 25, 2026
This Privacy Policy explains how BatchBot collects, uses, stores, and protects your information when you use our service. We are committed to protecting your privacy and being transparent about our data practices.
Account Information:
Content You Upload:
Product Links and Posting Records:
API Keys and Connected AI Assistants:
An API key lets an AI assistant you choose (for example Claude, through the Model Context Protocol) read and act on your BatchBot account: list and run formulas, import products, view your generated videos, check your credit balance, and record scheduled posts. The assistant only receives what it asks for while you are using it, and revoking the key in Settings ends its access immediately.
Payment Information:
Payment details (credit card numbers, billing address) are collected and processed directly by Stripe. We do not store your full payment information on our servers. We receive a Stripe customer ID and subscription status to manage your account.
Usage Data:
Instagram Messaging Information:
Linking an Instagram conversation does not give BatchBot access to your Instagram account, password, inbox, followers, or other conversations. BatchBot operates its own Instagram Professional account and processes messages that you choose to send to it.
We use the information we collect to:
We do not sell your personal information to third parties. We do not use your content for advertising purposes.
BatchBot uses the following third-party services that may process your data:
| Service | Purpose | Data Shared |
|---|---|---|
| Meta / Instagram | Instagram messaging and delivery of customer-initiated conversations | Messages and media exchanged with BatchBot, plus identifiers needed to deliver replies |
| OpenAI (via OpenRouter) | AI image generation, transcription, and text processing | Text prompts, product images, video audio |
| Stripe | Payment processing | Payment details, email, billing info |
| Cloudflare R2 | Cloud file storage | Uploaded images and videos |
| Supabase (PostgreSQL) | Database hosting | Account data, usage records |
| Railway | Application hosting and server logs | Requests to the service, and diagnostic logs that can include your email address (see Data Retention below) |
| PostHog | Product analytics and error reporting | Email address, plan, credit balance, subscription status, pages visited, and in-app events |
| Meta (Facebook and Instagram advertising) | Advertising measurement and conversion tracking | Advertising cookies and click identifiers, a hashed version of your email address and account ID, IP address, browser identifier, and conversion events (for example signing up, starting a trial, or making a payment). Loaded only when advertising measurement is enabled and, where required, after you consent. See Cookies, Analytics, and Advertising. |
| AI assistants you connect (for example Claude by Anthropic) | Acting on your account at your request through an API key you create | Whatever the assistant requests from your account while you use it: your formulas, products and product links, generated videos and their temporary download links, credit balance, and scheduled posts. The assistant's provider processes this data under its own terms and privacy policy, which you agree to separately. BatchBot never shares your password, payment details, or API key itself with the assistant. |
| TikTok | Advertising measurement and conversion tracking; posting videos you schedule | Advertising cookies and click identifiers, a hashed version of your email address and account ID, IP address, browser identifier, and conversion events (for example signing up, starting a trial, or making a payment). Loaded only when advertising measurement is enabled and, where required, after you consent. See Cookies, Analytics, and Advertising. When you schedule a video to TikTok through BatchBot's posting tools, the video, your caption, and the Shop product link are sent to TikTok from your own computer and browser, under TikTok's terms. BatchBot never receives your TikTok password or login session. |
| Resend | Transactional email delivery | Your email address and the contents of the message being sent to you |
Each third-party service has its own privacy policy. We encourage you to review them:
Session cookies. BatchBot uses session cookies to keep you logged in. These are essential to the service and are not used for advertising.
Product analytics. We use PostHog to understand how the product is used and to capture errors, so we can fix problems and decide what to build. PostHog receives the pages you visit and the actions you take in the app, together with your email address, plan, credit balance, and subscription status, so that activity can be tied to your account. PostHog sets its own identifiers, including cookies or equivalent browser storage. Analytics requests are sent through a path on our own domain for reliability; they are still processed by PostHog.
Advertising measurement. When advertising measurement is enabled, we load the
Meta (Facebook and Instagram) and TikTok advertising pixels and send those platforms conversion
events (for example, completing a signup, starting a trial, or making a payment) so we can
measure whether our ads work and reach people who are likely to be interested in BatchBot. The
pixels set their own cookies (Meta's _fbp and _fbc, TikTok's _ttp), and we set a first-party cookie (bb_attr) that records the page
you landed on, the site that referred you, and any ad click identifiers in the link you arrived
from. We also send the same conversion events from our servers (Meta Conversions API and TikTok
Events API) so they are counted when a pixel is blocked. Server events include a hashed
(irreversibly scrambled) version of your email address and account ID, your IP address and
browser identifier, and the cookie values above, which the platforms use to match the event to
an ad click. We do not sell your personal information, and we do not use the images, videos, or
prompts you upload for advertising.
Your choices. If you are in the European Union, European Economic Area, United Kingdom, or Switzerland, we do not load advertising pixels or send server conversion events until you accept them in the cookie banner, and you can change your answer at any time using the control below. Everywhere else, advertising measurement is on by default. Sending event data to Meta and TikTok for advertising may count as "sharing" personal information for cross-context behavioral advertising under the California Consumer Privacy Act and similar US state laws. You can opt out with the Your Privacy Choices control below, and we honor the Global Privacy Control browser signal as an opt-out. Opting out turns off the pixels and server conversion events for this browser and for any account you create or sign in to from it afterwards. It does not affect product analytics or the service itself.
Your Privacy Choices
Advertising measurement is on. It is off by default in the EU, UK and Switzerland until you accept the cookie banner.
Your choice is stored as a cookie in this browser only. It also stops server-side conversion events for any account you create or sign in to from this browser afterwards.
Advertising trackers load from the advertiser's own domain and can be blocked with your browser's privacy settings or an ad-blocking extension. Product analytics are served from a path on our domain, so those tools may not block them. To request deletion of the analytics data associated with your account, contact us using the details in the Contact section below; the service will continue to work.
We take reasonable measures to protect your information:
While we implement industry-standard security practices, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
You have the right to:
To exercise these rights, review our Data Deletion Instructions or email turner@batchbot.io.
BatchBot is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete that information.
BatchBot's servers are located in the United States. If you access the service from outside the United States, your information may be transferred to and processed in the United States. By using the service, you consent to this transfer.
We may update this Privacy Policy from time to time. We will notify users of material changes via email or through the service. The "Last updated" date at the top of this page indicates when the policy was last revised.
If you have questions or concerns about this Privacy Policy or our data practices, please email turner@batchbot.io.