Privacy Policy

Last updated: 2026-10-17 (draft)

This page explains what data BatchLab holds, why we hold it, who can see it, and how you can export or delete it. We use plain words on purpose.

1. Who we are

BatchLab is run by Ark & Dove Candle Co LLC ("we", "us"). Our mailing address is 7282 55th Ave E, Bradenton, FL 34203. You can reach us at support@getbatchlab.com.

BatchLab is a web app for candle makers and similar small makers. You use it to track materials, recipes, batches, burn tests, products, customers, orders, and expenses.

BatchLab is for businesses in the United States only. We do not offer it in the EU or UK yet.

2. Two roles

We play two different roles. This decides who is responsible for what.

Your account and business details. This is your email, your business name, settings and logo, and your billing status. We decide how this data is used to run BatchLab. For this data, we are the "business" (the California term) or the "controller".
Your records, including your customers' personal data. Your customer list holds personal data about your own buyers, such as names, emails, phone numbers, addresses, and order notes. You decide why you collect it. For this data, you are the business (controller) and we are your service provider (processor). We handle it only to run BatchLab for you.

Section 6 says what this means in practice.

3. What we collect

Your email address. You sign in with a 6-digit code we email to you. There are no passwords.
Business details. Your business name, your settings (such as currency and units), and your logo.
Your records. Materials, recipes, batches, burn tests, products, customers, orders, expenses, and the photos you upload. When a record is changed or deleted, we keep the earlier version for up to 30 days (at most the last 10 versions of each record), so we can undo an editing conflict or a mistake. Then it is deleted.
Files you upload. Burn-test photos, your logo, pictures and finished designs you add to labels and posts, and fonts you upload are stored with Cloudflare (see Subprocessors). Only people in your business can see them, except pictures you choose to share for email (see below). We don't put anything else on a public page, and we don't use them for anything except showing them to you.
Before a picture leaves your device, BatchLab removes hidden details such as the place it was taken and the camera used. Pictures you share for email are checked again before they get a web address.
Pictures you share for email. Pictures you share for email get a public web address so your customers' email apps can show them. Anyone with that address can see the picture. Stop sharing or delete it and we stop showing it right away, but email apps that already loaded it may keep their own copy. Shared pictures stop loading if your plan ends or you delete your account.
Fonts you upload stay in your account. You are responsible for having the right to use them.
Saved designs (your label, post and email layouts) are stored with your other records and follow the same rules: earlier versions are kept for up to 30 days so you can undo a mistake.
When you delete a file, we remove it from our storage. BatchLab won't let you delete a file that a saved design or an email draft still uses.
Photos in Trash are removed when you empty it.
A photo you delete while offline is removed from our storage when your device reconnects.
Your plan includes 1 GB (Starter) or 5 GB (Maker) of file space. If you go over it, for example after changing plans, we keep everything; you just can't add more until you make room.
Billing status. Stripe tells us which plan you chose, whether it is active, and when it renews. We never see or store your full card number.
Security data. The IP address and browser name of each signed-in session, and short-lived counters that limit sign-in attempts. We also log key account actions (export, import, delete) with the time and which user did it, but no IP address. See section 10 for how long.
Messages you send us. If you email us, we keep the email so we can answer you.

4. What we do not do

We do not sell your data. We do not share it for advertising.
We do not use analytics tools, ad pixels, or tracking pixels.
We do not read your records. We do not use them for our own purposes, such as marketing, research, or training AI models. The only exceptions are in section 6.
We do not send marketing email. [VERIFY]

5. Why we use your data

To run BatchLab: create your account, sign you in, save your records, store your photos, and let you export them.
To bill you through Stripe and handle refunds.
To keep BatchLab safe: stop abuse, limit bots, and investigate problems.
To write to you about your account: sign-in codes, and notices we send by hand. Stripe sends receipts, renewal reminders and failed-payment emails. [VERIFY]
To follow the law.

6. Your customers' data (where we are the processor)

This section covers personal data about your own customers that you put into BatchLab.

We handle it only to run BatchLab for you, based on what you enter and the actions you take in the app.
We do not read it, sell it, share it, or use it for our own purposes. The only exceptions are: help you when you ask us for support, keep BatchLab secure, and meet legal duties.
You are responsible for having the right to store it. You are also responsible for telling your customers how you use their data.
If one of your customers asks us about their data, we will point them to you. We will not answer for you, unless the law says we must.
You can edit, delete, and export your customer records in BatchLab. That is how you answer requests from your own customers.
Only people who need access to run and support BatchLab can reach your data. [VERIFY]
We use the outside companies listed on the Subprocessors page. If we add one that handles your records, we update that page and tell you first. [VERIFY]
If you need a signed data processing addendum (DPA), email us. [VERIFY]

7. Optional invoice reading with AI

BatchLab has an optional feature that reads a supplier invoice for you. It works only when you use it. When you do, the photo or PDF you upload is sent to Anthropic, which reads it and sends the result back. Invoices can show supplier names and prices, so only upload what you are happy to share.

We have not checked how long Anthropic keeps these files, or whether it uses them to train models. [VERIFY] Read Anthropic's privacy policy.

8. Cookies and browser storage

BatchLab sets one cookie that keeps you signed in. It is strictly necessary, so we do not ask for consent. [VERIFY]
If you arrive through a partner's referral link, BatchLab also sets a ref cookie with the partner's code for 60 days, so the partner gets credit if you sign up. It holds nothing else about you.
Your browser also stores your app settings. So the app keeps working offline, it also keeps a copy of your records and a few automatic backups on your device. "Sign out" on the Account screen removes your records, backups, and photos from that device. Signing out needs an internet connection.
To keep working offline, your device may also keep copies of your pictures. Sign out removes them.
Sign-in uses a bot check from Cloudflare called Turnstile. We have not confirmed whether it sets its own cookie or storage. [VERIFY]
We use no analytics or advertising cookies, so there is no cookie banner.
If you go to Stripe's checkout or billing pages, Stripe's own policy applies there.

We share data with the outside companies that help us run BatchLab. They are listed, with what each one sees, on the Subprocessors page. They may use the data only to serve us.

We may share data if the law requires it, for example a court order. Where the law allows, we tell you first. [VERIFY]

If we sell or merge the company, your data would move to the new owner. They would have to keep these promises, and we would tell you before it happens. [VERIFY]

10. How long we keep data

Your account and records: as long as your account is open.
Earlier versions of records: up to 30 days.
Sign-in sessions (with IP address and browser name): until you sign out, or 30 days after you last used the session.
Sign-in attempt counters (with the IP address): 1 day.
Account history (no name, email, or IP address): sign-up (with the partner code, if any), how you found us (the link you came from), plan picked, failed or refunded payments, cancellations and disputes, billing country if outside the US, exports, imports and deletion, each with its date. We keep it after the account is purged, to answer billing and partner questions. [VERIFY]
After your paid period ends, or a free trial ends with no plan picked: your account becomes read-only and Export still works. We keep it until you delete it, so you can come back or export later. If we ever start deleting inactive accounts, we will email you at least 30 days first.
After you delete your account: see section 11.
Billing and tax records: as long as the law requires. [VERIFY]
Support emails: as long as needed to help you. [VERIFY]
Backups: we back up every day and keep the newest 30 daily backups (about 30 days).

11. Deleting your account

The account owner can delete the account inside BatchLab. You type your business name to confirm. Then:

The account is closed at once. All sign-in sessions end, and any paid plan is canceled.
About 30 days after you delete (31 at most), we purge your records and photos.
Your backups are deleted in the same purge. Cloudflare's own recovery copy of our database can still hold your records up to 30 days more. [VERIFY]
The account history in section 10 stays, with no name, email, or IP address.
We keep billing and tax records only as long as the law requires. [VERIFY]

Deleting cannot be undone. Export your data first (section 12). Deleting an account does not earn a refund. See the refund page.

12. Exporting your data

You can export everything at any time, including when your account is read-only. The export is a zip file with one data.json file, CSV files, and your photos. A photo taken while offline is included once your device has uploaded it. The export also includes your uploaded pictures, designs and fonts.

13. Security

BatchLab uses HTTPS, so data is encrypted as it travels.
Each business's data is kept separate. Every request is checked against the signed-in business.
Sign-in codes expire after 10 minutes and allow 5 tries. We also use rate limits and a bot check on sign-in.
Cloudflare encrypts stored data. [VERIFY]

No system is perfectly safe. If we confirm a security incident that affects your data, we will tell you within 72 hours of confirming it. That is stricter than the 10 days Florida law gives us as a service provider (Fla. Stat. 501.171) [VERIFY]. We will say what happened, what data was involved, what we did, and what you should do.

14. Your rights and choices

You can export, correct, and delete your data in BatchLab, as described above.
For anything else, email support@getbatchlab.com. We reply within 45 days.
Some US state laws, such as California's, give residents the right to know, delete, and correct their data, and to opt out of the sale or sharing of data. We do not sell or share data. We follow these rights for everyone, even where the law does not require it. [VERIFY]
If you are one of a maker's customers, ask that maker first. They control that data. We will help them answer you.

15. Children

BatchLab is for adults running a business. You must be 18 or older. We do not knowingly collect data from children.

16. Changes to this policy

We will change the date at the top when we change this page. For important changes, we will email the account owner at least 30 days before they start. [VERIFY]

17. Contact

Ark & Dove Candle Co LLC, 7282 55th Ave E, Bradenton, FL 34203, support@getbatchlab.com.