Privacy Policy

Last updated: 2026-11-12

This page explains what data BatchLab holds, why we hold it, who can see it, and how you can export or delete it. We use plain words on purpose.

1. Who we are

BatchLab is run by BatchLab LLC, a Florida limited liability company ("we", "us"). Our mailing address is 7901 4th St N, STE 300, St. Petersburg, FL 33702. You can reach us at support@getbatchlab.com.

BatchLab is a web app for candle makers and similar small makers. You use it to track materials, recipes, batches, burn tests, products, customers, orders, and expenses.

BatchLab is for businesses in the United States only. It is not for personal or household use. We do not offer it in the EU or UK, or anywhere else outside the US.

2. Two roles

We play two different roles. This decides who is responsible for what.

Your account and business details. This is your email, your business name, settings and logo, and your billing status. We decide how this data is used to run BatchLab. For this data, we are the "business" (the California term) or the "controller".
Your records, including your customers' personal data. Your customer list holds personal data about your own buyers, such as names, emails, phone numbers, addresses, and order notes. You decide why you collect it. For this data, you are the business (controller) and we are your service provider (processor). We handle it only to run BatchLab for you.

Section 6 says what this means in practice.

3. What we collect

Your email address. You sign in with a 6-digit code we email to you. There are no passwords.
Business details. Your business name, your settings (such as currency and units), and your logo.
Your records. Materials, recipes, batches, burn tests, products, customers, orders, expenses, and the photos you upload. When a record is changed or deleted, we keep the earlier version for up to 30 days (at most the last 10 versions of each record), so we can undo an editing conflict or a mistake. Then it is deleted.
Files you upload. Burn-test photos, your logo, pictures and finished designs you add to labels and posts, and fonts you upload are stored with Cloudflare (see Subprocessors). Only people in your business can see them, except pictures you share for email and line sheets you share (see below). We don't put anything else on a public page, and we don't use them for anything except showing them to you.
Before a picture leaves your device, BatchLab removes hidden details such as the place it was taken and the camera used. Pictures you share for email are checked again before they get a web address.
Pictures you share for email. Pictures you share for email get a public web address so your customers' email apps can show them. Anyone with that address can see the picture. Stop sharing or delete it and we stop showing it right away, but email apps that already loaded it may keep their own copy. Shared pictures stop loading if your plan ends or you delete your account.
Line sheets you share. When you share a wholesale line sheet, BatchLab makes a web page with a long, random address. Anyone with that address can see it. It shows only what you put on the sheet: your business name, city, state, website and email, and your product names, SKUs, scents, sizes, case packs and prices, minimum order, lead time and payment terms. It never shows your costs, margins, suppliers or stock. We ask search engines not to list it. If you turn the link off, the page stops showing right away. It also stops if your plan ends or you delete your account. People who already opened it may have kept a copy.
Fonts you upload stay in your account. You are responsible for having the right to use them.
Saved designs (your label, post and email layouts) are stored with your other records and follow the same rules: earlier versions are kept for up to 30 days so you can undo a mistake.
When you delete a file, we remove it from our storage. BatchLab won't let you delete a file that a saved design or an email draft still uses.
Photos in Trash are removed when you empty it.
A photo you delete while offline is removed from our storage when your device reconnects.
Your plan includes 1 GB (Starter) or 5 GB (Maker) of file space. If you go over it, for example after changing plans, we keep everything; you just can't add more until you make room.
Your Shopify orders, if you connect a store. We read new orders from the day you connect, plus the last 30 days if you choose that: order number, dates, items, quantities, prices, discounts, shipping charged, taxes and refunds. We don't read or store your buyers' names, emails, phone numbers or addresses. We never change anything in your store.
Billing status. Stripe tells us which plan you chose, whether it is active, and when it renews. We never see or store your full card number.
Security data. The IP address and browser name of each signed-in session, and short-lived counters that limit sign-in attempts. We also log key account actions (export, import, delete) with the time and which user did it, but no IP address. See section 10 for how long.
Messages you send us. If you email us, we keep the email so we can answer you.
Beta applications. If you apply to be a beta maker, we keep your name, email, business name, shop link and your answers for up to 12 months, to choose beta makers and write to you. Then we delete them. Email support@getbatchlab.com to delete them sooner.

4. What we do not do

We do not sell your data. We do not share it for advertising.
We do not use ad pixels or tracking pixels.
We do not read your records. We do not use them for our own purposes, such as marketing, research, or training AI models. The only exceptions are in sections 6 and 7.
We do not send marketing email.

5. Why we use your data

To run BatchLab: create your account, sign you in, save your records, store your photos, and let you export them.
To bill you through Stripe and handle refunds.
To keep BatchLab safe: stop abuse, limit bots, and investigate problems.
To write to you about your account: sign-in codes, and notices we send by hand, such as notice of changes to these pages. Stripe sends receipts, renewal reminders and failed-payment emails for us.
To follow the law.

6. Your customers' data (where we are the processor)

This section covers personal data about your own customers that you put into BatchLab.

We handle it only to run BatchLab for you, based on what you enter and the actions you take in the app.
We do not read it, sell it, share it, or use it for our own purposes. The only exceptions are: help you when you ask us for support, keep BatchLab secure, and meet legal duties.
You are responsible for having the right to store it. You are also responsible for telling your customers how you use their data.
If one of your customers asks us about their data, we will point them to you. We will not answer for you, unless the law says we must.
You can edit, delete, and export your customer records in BatchLab. That is how you answer requests from your own customers.
Only people who need access to run and support BatchLab can reach your data.
We use the outside companies listed on the Subprocessors page. They must protect your data and use it only to serve us. Before we add one that handles your records, we update that page and email the account owner at least 30 days ahead. If we must switch faster to keep BatchLab running or safe, we tell you as soon as we can. If you object, email us. If we cannot solve it, you may cancel your plan.
If you need a signed data processing addendum (DPA), email us and we will send ours to sign.

7. Optional AI features

BatchLab has three optional AI features. Each one runs only when you use it. It sends a small amount of data to Anthropic, our AI provider, and gets a result back. Nothing goes to Anthropic unless you use a feature.

Invoice reading. We send the photo or PDF of the supplier invoice you upload, so it can be read into a list of items. Invoices can show supplier names, addresses and prices, so only upload what you are happy to share.
Ask your data. We send only the question you type and today's date. Anthropic turns the question into a lookup, and your own device runs that lookup over your records. Your records are not sent.
Shop email drafter. We send only the details you fill in for the pitch: your business name and first name, the shop's name, the contact's first name, the shop's city, your note, the products and prices you pick, your minimum order and your lead time. We do not send email addresses, your customers, orders, costs or stock. BatchLab does not send the email. You send it yourself.

Under Anthropic's commercial terms, Anthropic deletes what we send and what it sends back within 30 days and does not use it to train its models. If Anthropic's safety systems flag a request as breaking its usage policy, or the law requires it, it may keep that request longer. Read Anthropic's privacy policy.

We do not use your files, questions or drafts to train AI models. Our logs never hold them.

8. Cookies and browser storage

BatchLab sets one cookie that keeps you signed in. It is strictly necessary, so we do not ask for consent.
If you arrive through a partner's referral link, BatchLab also sets a ref cookie with the partner's code for 60 days, so the partner gets credit if you sign up. It holds nothing else about you.
If you arrive from a link that says where you found us (for example Instagram), BatchLab also sets a utm cookie with that one word for 60 days. When you create your business, we save it so we know which channel brought you. It holds nothing else about you.
Your browser also stores your app settings. So the app keeps working offline, it also keeps a copy of your records and a few automatic backups on your device. "Sign out" on the Account screen removes your records, backups, and photos from that device. Signing out needs an internet connection.
To keep working offline, your device may also keep copies of your pictures. Sign out removes them.
Sign-in uses a bot check from Cloudflare called Turnstile. It runs only on the sign-in step. It looks at browser signals to tell people from bots, and Cloudflare treats this as strictly necessary. It does not read what you type. See Cloudflare's Turnstile privacy policy.
We count page visits with Cloudflare Web Analytics, so we know which pages people read and roughly where they came from. It sets no cookies, does not build a profile of you, and does not follow you to other websites. We use no advertising cookies, so there is no cookie banner.
We do not track you across other websites. So "Do Not Track" and Global Privacy Control signals change nothing here: there is no tracking, sale or sharing to turn off.
If you go to Stripe's checkout or billing pages, Stripe's own policy applies there.

We share data with the outside companies that help us run BatchLab. They are listed, with what each one sees, on the Subprocessors page. They may use the data only to serve us.

We may share data when we believe in good faith that the law requires it, such as a court order, subpoena or valid government request. We may also share it to stop fraud or a security threat, or to protect someone from serious harm. Where the law allows, we tell you first so you can object.

If we sell or merge the company, or sell BatchLab, your data may move to the new owner as part of the deal. The new owner must keep the promises in this policy for that data, or change them only as section 16 allows. We will email the account owner before your data moves, or as soon as the law lets us.

10. How long we keep data

Your account and records: as long as your account is open.
Earlier versions of records: up to 30 days.
Order copies from Shopify: 120 days. The orders you add to BatchLab are your own records and follow your account.
Sign-in sessions (with IP address and browser name): until you sign out, or 30 days after you last used the session.
Sign-in attempt counters (with the IP address): 1 day.
Team invitations (with the invited person's email address): until they expire, then 30 more days.
Account history (no name, email, or IP address): sign-up and agreeing to the Terms (with the partner code, if any), how you found us (the link you came from), first real batch saved, plan picked, Strategy packs bought, Shopify connected or removed, failed or refunded payments, cancellations and disputes, billing country if outside the US, exports, imports and deletion, each with its date. We keep it after the account is purged, to answer billing and partner questions.
After your paid period ends, or a free trial ends with no plan picked: your account becomes read-only and Export still works. We keep it until you delete it, so you can come back or export later. If we ever start deleting inactive accounts, we will email you at least 30 days first.
If we close an account for fraud, abuse or illegal content: we may delete it after giving the owner 30 days to export, unless the law or someone's safety stops us (see the Terms of Service).
After you delete your account: see section 11.
Billing and tax records: as long as tax law requires us to keep them (usually 3 years after we file). Stripe keeps most of these records for us.
Support emails: as long as needed to help you, keep a record of what we agreed, and handle any later question or dispute about it.
Backups: we back up every day and keep the newest 30 daily backups (about 30 days).

11. Deleting your account

The account owner can delete the account inside BatchLab. You type your business name to confirm. Then:

The account is closed at once. All sign-in sessions end, and any paid plan is canceled.
About 30 days after you delete (31 at most), we purge your records and photos.
Your backups are deleted in the same purge. Cloudflare's own recovery copy of our database can still hold your records up to 30 days more.
The account history in section 10 stays, with no name, email, or IP address.
Disconnecting Shopify, or removing the app in your store, stops it right away. About 48 hours after you remove the app, Shopify asks us to delete your store's data, and we delete the order copies and the connection. Orders you already added to BatchLab stay in your account.
Billing and tax records stay as long as tax law requires us to keep them (usually 3 years after we file), as section 10 says.

Deleting cannot be undone. Export your data first (section 12). Deleting an account does not earn a refund. See the refund page.

12. Exporting your data

You can export everything at any time, including when your account is read-only. The export is a zip file with one data.json file, CSV files, and your photos. A photo taken while offline is included once your device has uploaded it. The export also includes your uploaded pictures, designs and fonts.

13. Security

BatchLab uses HTTPS, so data is encrypted as it travels.
Each business's data is kept separate. Every request is checked against the signed-in business.
Sign-in codes expire after 10 minutes and allow 5 tries. We also use rate limits and a bot check on sign-in.
Cloudflare encrypts stored data.

No system is perfectly safe. If we confirm a security incident that affects your data, we will tell you without undue delay. We aim to tell you within 72 hours of confirming it, and we will always tell you within the time the law sets. For example, Florida law gives us 10 days as your service provider (Fla. Stat. 501.171). We will say what happened, what data was involved, what we did, and what you should do. Telling you is not an admission that we were at fault.

14. Your rights and choices

You can export, correct, and delete your data in BatchLab, as described above.
For anything else, email support@getbatchlab.com. We reply within 45 days. If we need more time, we tell you why, and we may take up to 45 more days where the law allows.
Some US state laws, such as California's, give residents rights to know, correct, delete and get a copy of their data, and to opt out of its sale, its sharing for ads, and profiling. These laws may not apply to a business our size. Even so, we honor requests to know, correct, delete and copy your data from any user anywhere in the US. We do not sell or share personal data, use it for targeted ads, or use it to profile you. We will not treat you worse for using these rights.
To make a request, email us from the address on your account, so we know it is you. Someone you choose (an authorized agent) can ask for you with your signed permission. We may still check with you. If we say no, reply and ask us to look again. We will answer that within 45 days.
If you are one of a maker's customers, ask that maker first. They control that data. We will help them answer you.

15. Children

BatchLab is for adults running a business. You must be 18 or older. We do not knowingly collect data from children. If you think a child has given us data, email us and we will delete it.

16. Changes to this policy

We will change the date at the top when we change this page. For important changes, we will email the account owner at least 30 days before they start. If you do not agree, you can export your data and delete your account before then.

17. Contact

BatchLab LLC, 7901 4th St N, STE 300, St. Petersburg, FL 33702, support@getbatchlab.com.