Batchnook Privacy Policy

Effective date: upon publication · Last updated: September 29, 2026

Batchnook ("Batchnook," "we," "us") is operated by ARDEO LABS LLC, a Florida limited liability company. This policy explains what we collect, why, and what your rights are. It covers theBatchnook mobile and web apps, the Batchnook website, and support channels.

The short version: your data is yours. We don't sell it, we don't run ads, we don't use your content to train AI models, and you can export or delete everything at any time.

1. What we collect

Account information. Email address and authentication credentials (sign-in uses one-time email codes or sign-in links managed by our authentication provider; if you sign in with Apple or Google, we receive the identifier, email address, and name they share).

Your business content. What you enter to run your maker business: materials, purchases and vendor names, recipes, products and product photos, batches, orders, prices, marketplace fee presets, and your business name and logo (used on report headers).

Receipt photos and import files. Photos of supplier receipts you submit for AI import (or receipt text you paste), and CSV/spreadsheet files you upload for migration.

Your customers are yours. Orders you record or import — including marketplace imports — are stripped of customer identity before storage: products, quantities, prices, and fees only. Orders from a connected Shopify store are stripped of customer-identity fields (name, email, address, phone) before storage, and your cost-of-goods ledger never holds customer identity at all. Customers who buy through your Batchnook storefront are your customers: we store their name, shipping address, email, and order history for you — visible only to you, exportable by you, deleted with your account (we keep only a minimal order-contact record where product-safety law requires it — held five years, used for recalls and nothing else). We never sell their data or surface them to anyone else. Buyers are also Batchnook users: they hold Batchnook accounts, and Batchnook may communicate with them and — under the consents and notices they accept from us — market Batchnook and the marketplace to them. Your customer records stay yours throughout; what this does not promise is exclusivity of the buyer relationship.

Storefront buyer information (only if you open a storefront). What an order needs and nothing more: the buyer's name, email address, shipping address, a phone number if they choose to give one, the items and prices ordered, the shipping option, any gift note or personalization they typed, and — only if they tick the box themselves — a marketing opt-in recorded for you. Card details go to Stripe on Stripe's own pages and never reach us; we give Stripe the buyer's email address so it can fill in the form and send a receipt. If you buy a shipping label in the app, the buyer's name, shipping address, and any phone number or email address on the order, and your ship-from address and contact details, are sent to Shippo to create the label. Storefront buyer records are kept separate from the imported and manually recorded orders above. If you import customer records from another platform, they wait in a review area you control: nothing joins your buyer records unless you accept it, linking or merging is only ever your explicit action, and an import never upgrades anyone's marketing consent — a subscriber status carries over only when the other platform recorded it, with its date. A record you accept is governed exactly like any other storefront buyer record: visible only to you, exportable by you, deleted with your account, and never sold or surfaced to anyone else.

Payment information. When you subscribe on the web, Stripe processes the payment; when you subscribe inside the iOS or Android app, Apple or Google processes the payment through the store's in-app purchase system, and RevenueCat manages the subscription record on our behalf. We receive your subscription status only — we never receive or store card numbers or card details from any of these. RevenueCat additionally receives, to manage the subscription: your organization ID (as your app user ID), your purchase and subscription history, and your entitlement status. Money from your sales settles to accounts you own. Sales you record or import never move through Batchnook at all. Orders through your Batchnook storefront are processed by Stripe under your own Stripe account — funds settle directly to you, never into a Batchnook balance — and the Batchnook platform fee is deducted from the transaction proceeds by Stripe — see section 4 of our Terms of Service.

Usage and device data. Product analytics events (screens used, features triggered), device type, OS version, and approximate region, collected via PostHog. Approximate location (city and region) is derived from your IP address for usage analytics. Analytics events are keyed to a pseudonymous account identifier — linkable to your account, but carrying none of your business content. Crash and error diagnostics collected via Sentry.

On our seller-facing website pages (such as the home, pricing, and guide pages) — never on shop pages, listings, the basket, checkout, or order pages — we also record the browsing session (mouse movement, scrolling, and the page as displayed), with everything you type into a form masked, so we can see where the site confuses people.

Support communications. Emails you send to our support address, and messages you send through our website's contact form or the in-app support form. The in-app form also sends the diagnostic details support needs — app version and build, platform, OS version, device model, language, and time zone — and any photos you choose to attach.

Notifications. If you turn on notifications, an install-specific push token and your notification choices are stored on our servers so we can send the notifications you turn on — such as new orders, payouts, reviews, refunds and disputes, and the weekly digest; the token is removed when you sign out or delete your account.

2. How we use it

• Provide, maintain, and improve the service (including sync and backups).
• AI receipt import: receipt photos or text you submit are sent to Anthropic's API to be parsed into purchase line items. Results always land in a review queue for your approval — nothing is created without your confirmation. Under Anthropic's commercial API terms, your inputs and outputs are not used to train their models.
• Send you the emails the service requires (sign-in codes, receipts, security notices). Reminders like low-stock alerts are generated locally on your device, not from our servers. If you opt in, we also send a weekly digest of your shop's numbers — delivered from our servers as a push notification and/or email; you can turn either channel off in Settings, and every digest email carries a one-click unsubscribe.
• Measure aggregate product usage, diagnose crashes, prevent fraud and abuse, and comply with law.

We do not sell or rent personal information, we do not share it with third parties for their own advertising, and we send marketing email only if you opt in (unsubscribe anytime).

3. What is public, and what never is

Your business records — materials, purchases, batches, costs, margins, and reports — have no public or shareable pages. Reports you export (PDF/CSV) leave the app only when you share them yourself.

If you open a Batchnook storefront, the things you publish to it are public by design: your shop page and shop name, your listings, their photos, prices, and descriptions, and your shop's policies. That is the point of a storefront, and you decide what goes on it. Your buyers' information is never public, your costs and margins are never public, and nothing else about your account becomes public because you opened a shop.

4. Data on your device

Some things live only on your device: locally scheduled reminders (like low-stock alerts) are generated on-device, and in-app help is bundled with the app. Creating and editing records requires a connection. Device-level protections (passcode, encryption) are governed by your device settings.

5. Where your data lives

Data is stored with Supabase (PostgreSQL and file storage) in the United States, encrypted in transit (TLS) and at rest. Access in our systems is enforced by row-level security scoped to your account.

6. How long we keep it

• While your account is active: we keep your content so the service works; export is available anytime (More → Export my data, JSON/CSV), on any plan, including after you cancel a subscription.
• If you delete your account: deletion starts with an offered export and a 7-day grace window (you can restore by signing back in). After the grace period, your content is permanently deleted, except minimal records we must keep for legal, tax, or security purposes (e.g., invoices).
• Your storefront customers: kept while your account is active, exported by you at any time (CSV), and deleted with your account — except the order-contact record below.
• Order contacts, five years (product-safety law). For each storefront order we keep a minimal record — buyer name, the email address, phone number, and shipping address the order carries, the item, and the date — for five years from the order, and it survives account deletion and buyer deletion. It exists so that a product recall can reach the people who bought the product, which is what product-safety law requires of us and of you. It is used for that and nothing else, it is never used for marketing, and no one reads it in the ordinary running of the service.
• Safety reports and moderation decisions, five years. Reports, complaints, and the decisions we make on them are kept for five years and survive account deletion, so that a pattern stays answerable to a regulator or a court after the account is gone.
• Backups age out on a rolling schedule of no more than 30 additional days.

7. Your rights and choices

• Access & portability: export everything from More → Export my data — free on every plan.
• Correction: edit your content in the app.
• Deletion: delete your account in the app (More → Your data → Delete account), or email [email protected] from your account email and we'll do it. Deleting your account cancels a web subscription billed through Stripe (the remaining paid time is not refunded). An App Store subscription is managed by Apple, and a Google Play subscription by Google, and each keeps billing until you cancel it.
• Marketing opt-out: unsubscribe links in every non-transactional email.
• Your storefront customer list: export it as CSV from the app at any time, on every plan. It is yours; we never mail your buyers on our own behalf.
• If you bought from a Batchnook storefront: your order details belong to the shop you bought from, and we hold them for that shop. Email [email protected] and we will delete your name, contact address, and shipping address from that shop's customer list — everything except the five-year order-contact record described above, which product-safety law requires us to keep. You can ask us for a copy of what we hold about your orders the same way.
• State privacy rights: depending on where you live (e.g., California, Colorado, Virginia, Florida), you may have statutory rights to access, delete, correct, or obtain a copy of your personal information, and to non-discrimination for exercising them. We honor these requests for everyone, resident or not. We do not "sell" or "share" personal information as those terms are defined in the CCPA/CPRA.

To exercise any right: [email protected]. We verify requests via your account email and respond within the time required by applicable law (generally 45 days).

8. Children

Batchnook is a business tool for adults. It is not directed at children under 13 (or under 18 for account creation), and we do not knowingly collect information from them. If you believe a child has provided us information, contact us and we will delete it.

9. Security

Row-level security on every table, TLS everywhere, encryption at rest, scoped credentials, and no card data in our systems. No method of transmission or storage is 100% secure; if we learn of a breach affecting your personal information, we will notify you as required by law.

10. Service providers (subprocessors)

Each provider processes data only as needed to provide its service to us, under its own contractual data-protection commitments. We require each of these providers, by contract, to protect your data to a standard equal to the one this policy describes.

Site analytics

Our websites load Cloudflare Web Analytics, a privacy-first measurement script. It counts page views and measures page load performance without cookies, without fingerprinting, and without tracking you across other sites; it does not build a profile of you and we do not receive your name, email address, or precise location from it. We use it only to see which pages are visited and how fast they load.

Usage analytics

We ask before turning on usage analytics for visitors in the EU/EEA, United Kingdom and Switzerland; everywhere else it runs by default, exactly as described above. You can change your choice at any time using the "Analytics preferences" link in the footer.

11. Changes

We'll post changes here and update the date above. For material changes, we'll notify you in the app or by email before they take effect.

12. Contact

ARDEO LABS LLC
[email protected]