Subprocessors
Last updated: 2026-11-12
These outside companies help us run BatchLab. Each one handles some of your data on our behalf. We list what each one sees and why.
We do not sell data and we do not use ad companies. The only visit counting we use is Cloudflare Web Analytics, listed below. Before we add a company that handles your records, we update this page and email the account owner at least 30 days ahead. If we must switch faster to keep BatchLab running or safe, we tell you as soon as we can.
Cloudflare
- What it does
- Hosts BatchLab. Runs our database and file storage. Provides the bot check on sign-in (Turnstile), rate limiting, and cookieless page visit counts (Web Analytics).
- Data it handles
- Everything stored in BatchLab: account email, business details, your records, and your photos. It also sees IP addresses of visitors, and the browser signals used for the bot check on the sign-in step.
- Location
- United States. Our database and file storage are kept in the US. Requests pass through Cloudflare's worldwide network on the way, and shared pictures may be cached near the person viewing them.
- Status
- In use.
- Their privacy page
- cloudflare.com/privacypolicy
Stripe
- What it does
- Takes payments and runs subscriptions and billing. It also sends your receipts, yearly renewal reminders and failed-payment emails.
- Data it handles
- Your name or business name, email, card details, billing address, and payment history. We never see your full card number. Stripe also uses some of this data for its own fraud checks, under its own privacy policy.
- Location
- Stripe, LLC is a US company. It may process data in other countries under its own safeguards.
- Status
- In use.
- Their privacy page
- stripe.com/privacy
Resend
- What it does
- Sends the sign-in code emails. It sends nothing else.
- Data it handles
- Your email address and the text of the email it sends. It keeps sending logs for 30 days.
- Location
- United States.
- Status
- In use.
- Their privacy page
- resend.com/legal/privacy-policy
Anthropic
- What it does
- Runs the optional AI features: invoice reading, Ask your data, and the shop email drafter.
- Data it handles
- Invoice reading: the photo or PDF you upload, and what it reads from it, such as supplier names and prices. Ask your data: only the question you type and today's date, never your records. Shop email drafter: only the pitch details you fill in (your business name and first name, the shop's name, contact first name and city, your note, products and prices, minimum order and lead time). Nothing is sent unless you use a feature.
- How long it keeps it, and whether it trains on it
- Under its commercial terms, Anthropic deletes what we send and what it returns within 30 days and does not train its models on it. If its safety systems flag a request as breaking its usage policy, or the law requires it, it may keep that request longer.
- Location
- Anthropic, PBC is a US company. It may process data in other countries under its own safeguards.
- Status
- Optional. Only used when you use one of these features.
- Their privacy page
- anthropic.com/legal/privacy
- What it does
- Hosts the mailbox for support@getbatchlab.com. Cloudflare passes those emails on to it.
- Data it handles
- Your email address and whatever you write or attach when you email us. It does not hold your BatchLab records.
- Location
- Google LLC is a US company. It may process data in other countries under its own safeguards.
- Status
- In use.
- Their privacy page
- policies.google.com/privacy
Changes to this list
We update the date at the top when this list changes. Questions: support@getbatchlab.com.