Privacy Policy | BatchSet

1. Introduction

BatchSet, operated by Muhaymin Mehmood, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at https://batchset.com. Please read this policy carefully.

2. Information We Collect

2.1 Information You Provide

Account information: Name and email address when you register. If you sign up with email, your password is stored only as a hash by our authentication provider. If you sign in with Google, we receive your name, email address and profile photo from Google
Payment information: Billing details processed securely by Paddle (we do not store card numbers)
Uploaded files: Images and documents you submit for server-side processing (see section 4)
Links you create: Destination URLs, labels and notes for short links and dynamic QR codes
Spreadsheets and URL lists: For Excel/URL batches, the image links you provide, which our servers fetch for you
Website Image Auditor: The website address you submit. We fetch that site's publicly available pages and images to produce the report
Optional answers and messages: Onboarding answers (for example where you sell and how many images you handle), feedback and support messages, and your email address if you subscribe to our newsletter

2.2 Information Collected Automatically

Usage data: Pages visited, features used and how you interact with the site, collected with Google Analytics and Microsoft Clarity unless you turn analytics off (see section 6)
Account usage events: If you are signed in and have not turned analytics off, we record when you finish a batch or start a download in a tool: the tool name, the number of files that succeeded or failed, and the time. We never record file names, links or contents. These records are deleted after 90 days
Credit history: Each time credits are spent we record the reason, amount and resulting balance. This is a billing record and is kept regardless of analytics choices
Device data: Browser type, operating system and IP address. IP addresses are also used for rate limiting and abuse prevention
Sign-up source: When you first visit, we store your landing page, the referring website's hostname and any campaign tags in a first-party cookie, and save them to your profile if you create an account
Short-link and dynamic QR scans: When someone opens a BatchSet short link or scans a dynamic QR code, we record the time, IP address, browser, operating system, device type, approximate location (country and city, derived from the IP address) and referring page. The link's owner sees aggregated statistics, not IP addresses

3. How We Use Your Information

To provide, operate, and maintain the Service
To process payments and manage your subscription
To send transactional emails (account, conversion and billing messages)
To send a few getting-started and feedback emails after you sign up, and our newsletter if you subscribed. Each of these includes a one-click unsubscribe link
To improve our platform and develop new features
To respond to support requests
To detect and prevent fraud or abuse
To comply with legal obligations

4. File Processing & Retention

Files you upload are processed solely to deliver the conversion or processing service you requested. We do not use your files for training AI models or any other purpose beyond service delivery.

In-browser tools: Conversion, compression, resizing, cropping, EXIF removal, Standard background removal and static QR/barcode generation run on your device. Those files are never uploaded. Standard background removal downloads its AI model files to your browser; your image is not sent anywhere
Server jobs (a TIFF or HEIC photo your browser can't read, GIF/BMP/TIFF/PDF output, watermark, a PNG compressed to an exact size, server-side metadata control, Excel/URL batches): files travel over HTTPS to temporary storage. Original uploaded files are deleted right after processing. Results are kept for 1 hour on Free (long enough to download), 15 days on Pro and 30 days on Enterprise, then deleted by a daily cleanup job
HEIC photos are decoded in your browser with libheif, an open-source library under the LGPL-3.0 licence, loaded unmodified as a separate file. Source code: github.com/strukturag/libheif.
Background removal backups: On Pro and Enterprise, finished cut-outs are saved to your file backup for the retention period above. Free accounts get no backup
HD background removal (Pro and Enterprise): your image is sent to fal.ai, our AI model provider, for processing
Website Image Auditor: Reports are stored with your account. Reports from scans without an account are kept for 7 days. To read the image list of the start page we may use Google PageSpeed Insights, which receives that page's URL

5. Sharing Your Information

We do not sell your personal data. We share information only with the service providers that run BatchSet, and with authorities when required:

Paddle: Our payment processor and merchant of record, for billing purposes
Supabase: Our database and authentication provider
Vercel: Our hosting provider. It also supplies the approximate location used in link-scan statistics
Amazon Web Services (S3): Temporary file storage for server jobs
fal.ai: AI processing for HD background removal
Resend: Sending our emails and managing newsletter subscriptions
Upstash: Rate limiting and short-lived caches, which can include IP addresses
Cloudflare Turnstile: Bot protection on the Website Image Auditor
Google: Sign in with Google, Google Analytics, and PageSpeed Insights for the Website Image Auditor
Microsoft Clarity: Usage analytics, heatmaps and session replays
Legal authorities: When required by law or to protect our rights

6. Cookies and Analytics

We do not use advertising cookies. We use:

Essential cookies: To keep you signed in (including Google sign-in state)
Sign-up source cookie: A first-party cookie that remembers how you first found BatchSet (landing page, referring hostname, campaign tags) for up to 90 days
Analytics cookies (you can turn these off): Google Analytics and Microsoft Clarity set cookies (such as _ga, _clck and _clsk) to measure how the site is used. Clarity also records interactions such as clicks, scrolling and page content to produce heatmaps and session replays. Both load by default and stop when you turn analytics off; advertising signals stay off
Vercel Web Analytics: Cookieless page-view counts, without a personal identifier

You can turn analytics off (or back on) at any time with (also in the site footer). Turning analytics off removes the analytics cookies. You can also block or delete cookies in your browser settings; blocking essential cookies will sign you out and may affect Service functionality.

7. Chrome Extension

The BatchSet "Save Image as JPG, PNG or WebP" extension for Chrome converts the image you right-click inside your browser, on your device.

No uploads: The image is never sent to BatchSet or any third party. It is downloaded from the site it is on, converted by your browser and saved to your Downloads
No analytics: The extension has no analytics or tracking and collects no personal data
Stored on your device: Your settings (quality, max width, background colour, save prompt) and a list of your last 8 saves (file name, format, sizes) are kept by Chrome on your computer. You can clear the list from the extension's popup, and uninstalling the extension removes it
Site access: If you allow access to all sites, it is used only to download the specific image you choose to convert, at the moment you choose it. You can remove that access from the popup at any time

8. Data Security

We implement industry-standard security measures including HTTPS encryption, Row Level Security (RLS) on our database, and secure credential management. However, no method of internet transmission is 100% secure, and we cannot guarantee absolute security.

9. Your Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account and associated data
Object to or restrict processing of your data
Data portability (receive your data in a structured format)

To exercise any of these rights, contact us at [email protected]

10. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

11. International Data Transfers

Your data may be stored and processed in data centers outside your country of residence. By using the Service, you consent to the transfer of your information to countries that may have different data protection laws than your country.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

13. Contact Us

For privacy-related questions or requests, please contact: [email protected]