Privacy Policy

1. Information We Collect

BatchGPT ("we", "us", or "our") collects information to provide and improve our AI-powered batch processing service. The types of information we collect include:

Account Information

Name and email address from your Google account
Profile picture (if provided by Google OAuth)
Account creation and login timestamps
User preferences and settings

Uploaded Data

CSV and XLS files uploaded for processing
File metadata (name, size, upload time)
Column headers and data structure information
Custom prompts and processing instructions

Usage Data

Job submission history and processing statistics
Credit usage and billing information
Feature usage patterns and preferences
API requests and system interactions

Technical Information

IP addresses and browser information
Device identifiers and operating system details
Session data and authentication tokens
Error logs and diagnostic information

2. How We Use Your Information

We use the collected information for the following purposes:

Service Provision

Processing your uploaded files through AI models
Managing your account and authenticating access
Providing prompt testing and batch processing capabilities
Generating and delivering processing results

Platform Improvement

Analyzing usage patterns to enhance user experience
Identifying and fixing technical issues
Developing new features and capabilities
Optimizing processing performance and reliability

Communication

Sending service updates and maintenance notifications
Providing customer support and technical assistance
Sharing important policy changes or security alerts
Processing billing inquiries and payment confirmations

Legal Basis: We process your data based on contract fulfillment (providing our service), legitimate interests (improving our platform), and your consent where required by applicable law.

3. Third-Party Services and Data Sharing

BatchGPT integrates with several third-party services to provide our functionality. Your data may be shared with:

Google OAuth (Authentication)

We use Google OAuth for secure authentication
Google provides your name, email, and profile picture
Subject to Google's Privacy Policy
You can revoke access through your Google account settings

OpenAI (AI Processing)

Your uploaded data and prompts are sent to OpenAI for processing
OpenAI processes data according to their Data Processing Agreement
OpenAI does not use your data to train their models (Business tier)
Data is processed temporarily and not permanently stored by OpenAI

Creem (Payment Processing)

Payment information is processed by Creem for credit purchases
We do not store your credit card or payment details
Payment data is subject to Creem's Privacy Policy
Transaction records are maintained for billing purposes

Supabase (Storage & Database)

Your files are stored securely in Supabase Storage
Database information is hosted on Supabase PostgreSQL
All data is encrypted in transit and at rest
Infrastructure hosted on enterprise-grade cloud providers

We do not sell, rent, or share your personal information with third parties for marketing purposes. Data sharing is limited to service provision and legal compliance.

4. Data Storage and Security

We implement comprehensive security measures to protect your data:

Technical Safeguards

End-to-end encryption for data transmission (HTTPS/TLS 1.3)
Encryption at rest for stored files and database records
Secure authentication with OAuth 2.0 and JWT tokens
Regular security audits and vulnerability assessments

Access Controls

Role-based access control for internal systems
Multi-factor authentication for administrative access
Principle of least privilege for system permissions
Regular access reviews and deprovisioning procedures

Infrastructure Security

Enterprise-grade cloud infrastructure
Regular security updates and monitoring
Network protection and firewall security
Secure authentication with OAuth 2.0

Despite our security measures, no system is 100% secure. We encourage users to protect their account credentials and report any suspected unauthorized access immediately.

5. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

Data Access and Portability

Request a copy of your personal data in a structured format
Download your uploaded files and processing history
Export your account information and preferences

Data Correction and Updates

Update your profile information through account settings
Correct inaccurate personal information
Request correction of billing or usage records

Data Deletion

Delete specific uploaded files and associated data
Request complete account deletion and data removal
Some data may be retained for legal or business purposes

Processing Restrictions

Object to certain types of data processing
Request limitations on how your data is used
Withdraw consent for optional data processing

To exercise these rights, please contact us at batchgpt.contact@gmail.com. We will respond to your request within 30 days and may require identity verification.

6. Data Retention Policies

We retain your data for different periods based on the type of information and business needs:

Account Data

Account information retained while your account is active
30-day grace period after account deletion for recovery
Some records retained longer for legal compliance

Uploaded Files

Files stored until manually deleted by user
You can delete files anytime from your dashboard
Processing results remain available for download

Usage and Billing Data

Transaction records kept for 7 years for tax purposes
Usage analytics retained for 2 years
System logs retained for 1 year for security purposes

7. Cookies and Tracking Technologies

BatchGPT uses cookies and similar technologies to enhance your experience:

Essential Cookies

Authentication tokens to maintain your login session
Security cookies to prevent cross-site request forgery
Preference cookies to remember your theme and language settings

Analytics Cookies

Usage analytics to understand feature adoption
Performance monitoring to identify issues
Aggregated data that cannot identify individual users

You can control cookie settings through your browser preferences. Disabling essential cookies may limit platform functionality.

8. International Data Transfers

Your data may be transferred to and processed in countries other than your residence:

The service is operated from Seoul, Republic of Korea
Data storage and processing occur through global cloud infrastructure (Supabase)
OpenAI processes data in accordance with their global infrastructure
We implement appropriate safeguards for international transfers
We comply with applicable international data transfer requirements

9. Children's Privacy

BatchGPT is not intended for use by children under the age of 13 (or 16 in the EU):

We do not knowingly collect personal information from children
Our service requires Google OAuth, which has age restrictions
If we become aware of child data collection, we will delete it promptly
Parents can contact us to report and remove any child's information

10. Privacy Policy Updates

We may update this Privacy Policy to reflect changes in our practices or legal requirements:

Material changes will be notified via email and platform announcements
The "Last Updated" date indicates when changes were made
Continued use after updates constitutes acceptance of changes
You may delete your account if you disagree with policy changes

11. Regional Privacy Laws

European Union (GDPR)

EU residents have additional rights under the General Data Protection Regulation, including the right to data portability, right to be forgotten, and the right to lodge complaints with supervisory authorities.

California (CCPA/CPRA)

California residents have rights to know what personal information is collected, request deletion, opt-out of sale (we don't sell data), and non-discrimination for exercising privacy rights.

Republic of Korea & Other Jurisdictions

We comply with applicable privacy laws including the Personal Information Protection Act (PIPA) in the Republic of Korea, and other regional regulations where our service is used.

12. Contact Information for Privacy Matters

For privacy-related questions, concerns, or to exercise your rights:

Contact Email: batchgpt.contact@gmail.com

Service: BatchGPT

Location: Seoul, Republic of Korea

We aim to respond to privacy inquiries within 30 days. For urgent security concerns, please contact batchgpt.contact@gmail.com immediately.