Privacy Policy

Last updated: June 2026

Our commitment to privacy

Your privacy is our top priority. BatchFox was designed from the ground up to protect your data. All image processing happens locally on your device, and we never access, upload, or store your images. This policy explains what minimal data we do collect and how we protect it.

1. Information We Collect

We collect minimal information: your email address for license management, device information for activation, and anonymous usage analytics (optional). We never access or collect your images.

2. How We Use Your Information

Your email is used for license delivery and support communications only. Device information is used to validate license activations. Analytics help us improve the software.

3. Local Processing

BatchFox processes all images 100% locally on your device. Your images never leave your computer, are not uploaded to our servers, and we have no access to them whatsoever.

4. Third-Party Services

We use the subprocessors listed in § 12 to provide the service, including Stripe for payment processing. We do not sell or share your personal information with third parties for marketing purposes.

5. Data Storage and Retention

Your license information is stored securely in encrypted databases. We retain personal data only as long as necessary for the purposes described in this policy and to meet legal obligations:

  • Account information (email, license key, plan tier): for the duration of your account, plus 7 years for tax and legal compliance after account closure.
  • Purchase history and payment metadata: 7 years for tax and legal compliance.
  • Support ticket content: 3 years from ticket closure.
  • Anonymous usage analytics (if opted in): 24 months.
  • Server logs: 90 days. Backup copies: longest retention 13 months.

6. Your Rights

You have the right to access, correct, or delete your personal data. To exercise these rights, contact us at support@batchfoxstudio.com or via the contact form at https://batchfox.app/contact. California residents have additional rights described in § 11. We will respond within the timeframe required by applicable law.

7. Cookies

Our website uses strictly necessary cookies for account login, license activation, and secure checkout. We do not use marketing or advertising cookies and we do not engage in cross-context behavioral advertising. Our full Cookie Policy is available at https://batchfox.app/cookies. You can also disable cookies in your browser settings, though strictly necessary cookies are required to log in or make a purchase.

8. Security

We implement industry-standard security measures to protect your data. However, no method of transmission over the internet is 100% secure.

9. Children's Privacy

BatchFox is not intended for users under 13. We do not knowingly collect information from children. If you believe we have, please contact us immediately.

10. Changes to Policy

We may update this policy periodically. We will notify users of significant changes via email. Continued use after changes constitutes acceptance.

11. California Residents’ Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) provide you with specific rights regarding your personal information. WE DO NOT SELL YOUR PERSONAL INFORMATION FOR MONETARY OR OTHER VALUABLE CONSIDERATION. WE DO NOT SHARE YOUR PERSONAL INFORMATION FOR CROSS-CONTEXT BEHAVIORAL ADVERTISING. Accordingly, we do not provide a "Do Not Sell or Share My Personal Information" link, because no sale or sharing occurs; if our practices change, we will update this policy and provide the appropriate disclosures and opt-out mechanisms. In the past 12 months we have collected these categories of personal information: identifiers (email, IP address, device identifier for activation); commercial information (purchase history, plan tier); limited internet-activity information (usage analytics, only if you opt in); and approximate geolocation derived from IP for payment and activation. We do NOT collect categories of sensitive personal information as defined by the CPRA, and we do not purchase personal information from data brokers.

As a California resident, you have the following rights with respect to your personal information:

  • Right to Know: request that we disclose the categories of personal information we have collected, the sources, the purposes, and the categories of third parties with whom we have shared your information.
  • Right to Delete: request that we delete personal information we have collected from you, subject to certain exceptions.
  • Right to Correct: request that we correct inaccurate personal information we maintain about you.
  • Right to Portability: request a portable copy of personal information we have collected from you.
  • Right to Limit Use of Sensitive Personal Information and Right to Opt Out of Sale or Sharing: applicable only if we collect sensitive information or sell or share for cross-context behavioral advertising; we do neither, so these rights do not apply.
  • Right Against Discrimination: we will not discriminate against you for exercising any of these rights.
  • To exercise any of these rights, contact us at support@batchfoxstudio.com or via https://batchfox.app/contact, providing sufficient information to verify your identity (typically the email address used at registration). We will respond within forty-five (45) days; for complex requests we may extend by an additional forty-five (45) days with notice. You may designate an authorized agent, subject to verification.

12. Subprocessors

BatchFox Studio LLC engages the following subprocessors to process personal information on our behalf in connection with providing the software and services. We have contractual obligations with each subprocessor to maintain appropriate security and confidentiality standards. All are located in the United States.

  • Stripe, Inc. (payment processing): payment card data (processed by Stripe; we do not receive raw card data), purchase amount, email address for receipt. Privacy policy: https://stripe.com/privacy
  • Microsoft Azure (license validation and activation): license key, account identifier, activation metadata (IP address, device identifier). Privacy policy: https://privacy.microsoft.com
  • Render (licensing server hosting): server logs (IP address, user agent), license activation requests. Privacy policy: https://render.com/privacy
  • Base44 (website and application hosting): server logs (IP address, user agent), account and request metadata.
  • We notify users in advance of material changes to our subprocessor list via this Privacy Policy. If you object to a new subprocessor, you may terminate your subscription per the cancellation method in Terms § 15(b) and request a prorated refund per the Refund Policy.

13. Geographic Scope

BatchFox is operated from the United States and is intended for users located in the United States. We do not target, market to, or direct our services at residents of the European Economic Area (EEA), the United Kingdom, or Switzerland, and we do not knowingly offer the service to such residents. If you access BatchFox from outside the United States, you do so on your own initiative and are responsible for compliance with local laws. We process personal information in the United States.

14. Data Breach Notification

In the event of a personal data breach that is reasonably likely to result in a risk to your rights and freedoms, we will:

  • (a) Notify the relevant supervisory authority without undue delay and, where feasible, not later than 72 hours after we become aware of the breach, in accordance with applicable law.
  • (b) Notify affected users without undue delay where the breach is likely to result in a high risk to their rights and freedoms, in accordance with applicable US state breach-notification laws. Notification will be by email to the address you provided at registration and, where appropriate, by website notification.
  • (c) The notification will include, where feasible: the nature of the breach; the categories and approximate number of data subjects and records concerned; the likely consequences; and the measures taken or proposed to address the breach and mitigate its effects.