Privacy Policy

Account & shop data. Your email address, shop name, bio, city/region, timezone, product catalog, schedules, and the design configuration of your storefront. This is the data you enter in Studio.

Payments. Payouts run through Stripe Connect. Stripe collects and stores your payout and identity-verification details under Stripe’s privacy policy. We store only Stripe account identifiers and payment status — never card or bank numbers.

If you choose to connect your Instagram account, we request your permission via Meta’s official login flow and then access, through the Instagram API: your profile handle, and your media (photos and captions). We use this data for exactly two things:

1. Building your storefront. Our design engine analyzes your photos (colors, subjects) and captions to art-direct your site and import products and gallery images you select.

2. Keeping your gallery fresh. If you enable it, we periodically sync new posts you choose to your storefront gallery.

Access tokens are stored encrypted and are decrypted only inside our background workers. We do not read your messages, followers, or any data beyond the permissions shown on Meta’s consent screen, and we never post to your account.

Deleting Instagram data.Disconnecting Instagram in Studio stops all syncing and deletes stored tokens. You can also request deletion of all imported Instagram media at any time (see “Deletion” below). We also honor Meta’s data-deletion callbacks: if you remove Batch from your Instagram/Facebook settings, Meta notifies us and we automatically delete your tokens and imported Instagram data, and provide a confirmation code you can use to track the request.

When you place an order with a merchant we collect your name, contact details (email and/or phone), pickup or delivery preferences, and your order contents — this is shared with that merchant so they can fulfill your order. Card payments are processed by Stripe; card numbers never touch our servers.

Marketing email from a merchant is opt-in only, and every message includes a one-click unsubscribe that takes effect immediately.

We use first-party cookies strictly for signing in and keeping your session. We do not run third-party advertising trackers on storefronts. Error monitoring (Sentry) receives technical crash data, with secrets and personal payloads scrubbed.

Our infrastructure providers are Supabase (database, storage, auth), Vercel (hosting), Stripe (payments), Resend (transactional and marketing email), Meta (Instagram API, if connected), and Sentry (error monitoring). Each processes data only to provide their service to us.

Shop and order data is kept while your account is active, and order records are kept as long as the merchant needs them for bookkeeping and tax obligations. Encrypted Instagram tokens are deleted immediately on disconnect. Backups roll off automatically on our provider’s schedule.

You can request access to, correction of, or deletion of your personal data at any time. Merchants can delete their shop (including all imported Instagram data) from Studio; shoppers can ask the merchant or us directly. Email privacy@usebatch.shop and we will complete verified requests within 30 days. Where GDPR, CCPA, or similar laws apply, these are the rights those laws give you, and we honor them regardless of where you live.

If this policy changes materially we will note it here with a new date and, for significant changes, email merchants. Questions: privacy@usebatch.shop.