Privacy Policy

Last Updated: October 17, 2026

1. Introduction

This Privacy Policy describes how Right Speed, LLC, a Michigan limited liability company doing business as Batch52 (“Batch52,” “we,” “us,” or “our”), collects, uses, shares, and protects personal information when you use the Batch52 platform, website (batch52.com), and all related services (collectively, the “Service”).

This Privacy Policy applies to two categories of users:

• Bakers: Users who create accounts and operate storefronts on the Service; and
• Customers: Visitors who browse Baker storefronts and may place orders or submit inquiries.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.

2. Information We Collect

2.1 Information from Bakers

When you create an account and operate a storefront, we collect:

• Account Information: Name, email address, and authentication credentials;
• Business Information: Business name, description, location, contact information, and pickup/delivery details;
• Product Information: Product names, descriptions, pricing, images, categories, and allergen information;
• Payment Account Information: Stripe Connect or Square account details necessary to facilitate payment processing (note: Batch52 does not store your bank account numbers, routing numbers, or full credit card numbers — these are handled exclusively by Stripe or Square);
• Imported Content: If you choose to connect your Facebook Page during setup, we import the Page details, photos, posts and reviews you authorize through Meta’s Graph API to build your storefront;
• Referral Information: Your referral code and which Bakers signed up through it, used to credit referral rewards; and
• Site Configuration: Theme preferences, custom domain settings, and storefront customizations.

2.2 Information from Customers

When you visit a Baker storefront or place an order, we may collect:

• Order Information: Name, email address, phone number, order details, and delivery/pickup preferences;
• Payment Information: Payment processing is handled entirely by the Baker’s payment provider, Stripe or Square. Batch52 does not store credit card numbers or sensitive payment credentials;
• Communication Preferences: Whether you opt in to receive marketing communications from a Baker, and whether you consent to receive order-related text messages (SMS);
• Reviews: The name, rating and comment you submit when you review a Baker. Your review is shown publicly on that Baker’s storefront as your first name and last initial;
• Rewards: If a Baker runs a loyalty program, your punch or points balance, linked to the contact details on your orders; and
• Inquiry Data: Information you provide through contact or inquiry forms on Baker storefronts.

2.3 Information Collected Automatically

When you access the Service, we automatically collect:

• Session Data: We assign a session identifier via a cookie (batch52_session) to enable core functionality such as cart persistence and site generation. This cookie has a 30-day lifetime;
• Usage Data: Page views, unique visitor counts, and cart interaction data, aggregated on a daily basis for analytics;
• Technical Data: Browser type, operating system, and general location data. Our hosting and error-monitoring providers keep IP addresses in short-lived server logs. In our own systems we store only hashed IP addresses, used for rate limiting, abuse prevention and QR-code scan counts, never for analytics or advertising; and
• Cart Data: Items added to shopping carts are stored locally in your browser and synchronized with our servers to enable cart persistence across sessions.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Providing the Service: To operate, maintain, and improve the Batch52 platform, including storefront hosting, order processing, and payment facilitation;
• AI Content Generation: To generate website content, product descriptions, and images using artificial intelligence services (see Section 7);
• Communication: To send transactional emails (order confirmations, status updates), account notifications, and, with your consent, marketing communications;
• Analytics: To understand how users interact with the Service and to improve its functionality and user experience;
• Reviews, Rewards and Referrals: To display the reviews you submit on a Baker’s storefront, to track loyalty rewards a Baker offers, and to credit Bakers who refer other Bakers;
• Security: To detect, prevent, and address fraud, abuse, security issues, and technical problems;
• Legal Compliance: To comply with applicable laws, regulations, and legal processes; and
• Customer Support: To respond to your inquiries and provide assistance.

4. Data Controller and Data Processor Roles

The Service involves two distinct data processing relationships:

Batch52 as Data Controller: For Baker account data, platform usage data, and data necessary to operate the Service, Right Speed, LLC acts as the data controller and determines the purposes and means of processing.

Batch52 as Data Processor: For Customer data collected through Baker storefronts (order information, customer contact details, marketing preferences), Batch52 acts as a data processor on behalf of the Baker. The Baker is the data controller for their customer data and is responsible for:

• Obtaining appropriate consent from their customers for data collection and processing;
• Complying with applicable data protection laws regarding their customer data;
• Responding to customer data access, correction, and deletion requests; and
• Ensuring that their use of customer data complies with the marketing preferences and consent given by their customers; and
• Deciding whether to connect an AI assistant to their shop (Section 7A). A Baker who connects an assistant instructs us to share their shop and customer data with that assistant’s provider, and is responsible for having the right to do so and for telling their customers where their information goes.

5. Third-Party Service Providers (Sub-Processors)

We use the following third-party service providers to operate the Service. Each provider receives only the data necessary to perform its specific function:

These providers are contractually obligated to process data only as instructed and to maintain appropriate security measures. We will update this list as providers change. For the most current list, please contact us at support@batch52.com.

AI assistants you choose to connect (Section 7A) are not our sub-processors: you authorize them, and their provider — Meta (Muse), OpenAI (ChatGPT) or Anthropic (Claude) — receives shop data under its own terms with you.

6. Cookies and Tracking Technologies

We use the following cookies and similar technologies:

Essential Cookies

• batch52_session — A session identifier (UUID) stored as an HTTP-only cookie with a 30-day lifetime. This cookie is essential for core functionality including cart persistence, demo site generation, and anonymous session tracking. It does not contain personal information.
• Authentication cookies — Managed by our authentication provider (Clerk) to maintain your login session. These are set only for registered Baker accounts.
• b52_ref— Set when you arrive through a Baker’s referral link. It holds a signed referral identifier (no personal information) for 60 days so that, if you sign up, the Baker who referred you receives credit.

Analytics

We use Google Analytics to collect anonymized usage data. Google Analytics may set its own cookies. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

Advertising (batch52.com marketing pages only)

Our own marketing pages on batch52.com load the Meta Pixel (cookies _fbp, _fbc) and the Pinterest tag (_pin_unauth) to measure our advertising and to show Batch52 ads to people who visited. These tags share your browser identifier and the pages you viewed with Meta and Pinterest, which use them under their own privacy policies. They are not loaded on Baker storefronts, in the Baker admin, or on checkout pages. You can control them through Meta’s ad settings, Pinterest’s privacy settings, or by blocking third-party cookies in your browser.

Local Storage

We use browser local storage to persist your shopping cart contents (batch52_bag) with a 7-day expiry. This data is stored only in your browser and is not transmitted to our servers until you proceed to checkout.

7. AI and Automated Processing

Batch52 uses artificial intelligence services to provide certain features, including site generation, content creation, and image generation. When you use these features:

• Business descriptions and prompts you provide to our own site and content tools may be sent to OpenAI or Runware to generate content;
• These providers process that data under their own data processing terms;
• Our own content tools do not send your customers’ details to AI providers. If you connect an AI assistant to your shop (Section 7A), that assistant can read customer details you allow it to see;
• AI-generated outputs are stored on our platform and associated with your account; and
• We do not use your personal data or your customers’ data to train AI models.

7A. AI Assistant Connections

You can connect an AI assistant you use — such as Meta’s Muse, OpenAI’s ChatGPT or Anthropic’s Claude — to your Batch52 shop. Nothing is connected unless you sign in to Batch52 and tap Allow.

What a connected assistant can see:your products, orders, batch days, reports, settings and help articles, and your customers’ names and order history. When you ask it for contact details, it can also see a customer’s email address, phone number and the delivery address on an order.

What it can change: your products, photos, site text, colors, business name, location and mailing address, and time zone. It cannot change orders or batch days, change your account or contact email addresses, message your customers, see card details, or move money.

Who receives the data:the assistant’s provider (for example Meta, OpenAI or Anthropic) receives what the assistant reads, and handles it under its own privacy policy and terms with you. We don’t control what an assistant’s provider keeps after it reads it. Some providers use what their assistant reads to improve their models unless you turn that off in the assistant’s settings. We do not review, control or endorse the assistant or its provider.

What we keep:for each assistant request we record which tool ran, when, whether it worked, and a fingerprint of the request — never the customer details themselves. We keep these records for 13 months, then delete them. We also keep a record of each connection: which assistant, when it was first connected and last used, and whether it is read-only. Photo uploads made through an assistant use a one-time upload link that expires after 15 minutes; a failed upload’s error message is kept for 7 days.

Your controls:see and disconnect connected assistants any time in your Batch52 admin under Settings → AI assistants, or in the assistant’s own settings. A connection also ends by itself after 60 days without use, and after 180 days in any case; you can reconnect whenever you like. When you disconnect, we stop the assistant’s access immediately. Within 30 days we delete the connection’s records, except the request history above and a note that the connection was ended, which we keep so that assistant cannot reconnect without your approval.

8. Email Communications

We send the following types of email communications:

Transactional Emails

Order confirmations, status updates, account notifications, and security alerts. These are necessary for the operation of the Service and cannot be opted out of while you maintain an account.

Marketing Emails

Bakers may send marketing communications (announcements, promotions, newsletters) to customers who have opted in to receive them. Each marketing email includes an unsubscribe link. We maintain suppression lists to honor unsubscribe requests, bounces, and spam complaints in compliance with the CAN-SPAM Act.

To unsubscribe from a Baker's marketing emails, click the unsubscribe link in any email, or contact the Baker directly.

8a. SMS/Text Communications

When placing an order on a Baker storefront, you may opt in to receive order-related text messages (SMS). By checking the SMS consent box at checkout, you consent to receive the following types of text messages:

• Order Confirmations: Confirmation that your order has been received;
• Order Status Updates: Notifications when your order is ready for pickup or has been delivered; and
• Pickup Coordination: Messages to coordinate pickup time, location, or other logistics.

Message Frequency

Message frequency varies based on your order activity. You will typically receive 1-5 messages per order.

Msg & Data Rates

Message and data rates may apply depending on your mobile carrier and plan. Batch52 is not responsible for any charges from your carrier related to receiving text messages.

Opting Out

You can opt out of SMS messages at any time by replying STOP to any message. After opting out, you will receive one final confirmation message and no further texts will be sent. You may also contact the Baker directly to request removal from SMS communications.

Phone Number Handling

Your phone number is collected at checkout for order fulfillment and communication. We share it only with the Baker whose storefront you ordered from, with our messaging provider (Twilio) to deliver these texts, and with the Baker’s payment provider when it is part of the order record. Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. We do not sell or rent your phone number. Phone numbers are stored securely and retained in accordance with our data retention policies described in Section 10.

9. Data Security

We implement appropriate technical and organizational security measures to protect your personal data, including:

• Encryption of data in transit (TLS/HTTPS) and at rest;
• Every request is scoped to the signed-in Baker’s shop at the application layer, with database policies as a second layer where enabled;
• Secure authentication via industry-standard providers;
• Regular security monitoring and error tracking; and
• Access controls limiting data access to authorized personnel and systems.

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we commit to promptly notifying affected users in the event of a data breach as required by applicable law.

10. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Demo Sites: If you generate a demo site without creating an account, the site and all associated data will be automatically deleted after seven (7) days. To keep your site, you must create an account and claim the demo site before the 7-day period expires.
• Baker Accounts: Data associated with your account is retained until you delete your account (see Section 14). We may retain certain data for a reasonable period after deletion to comply with legal obligations, resolve disputes, and enforce our agreements.
• Customer Order Data:Order data is retained by the Baker's storefront for as long as the Baker maintains their account. When a Baker deletes their account, the associated customer records are deleted as described in Section 14.
• Cart Data: Abandoned server-side cart data is periodically cleaned up. Browser-stored cart data expires after 7 days.
• Analytics Data: Aggregated, anonymized analytics data may be retained indefinitely as it does not contain personal information.

11. Your Privacy Rights

Depending on your location and applicable law, you may have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you;
• Right to Correction: Request correction of inaccurate or incomplete personal data;
• Right to Deletion: Request deletion of your personal data (subject to legal retention obligations);
• Right to Restrict Processing: Request that we limit how we use your data;
• Right to Data Portability: Request your data in a structured, machine-readable format;
• Right to Object: Object to processing of your personal data for certain purposes; and
• Right to Withdraw Consent: Withdraw consent for data processing where consent is the legal basis.

To exercise any of these rights, please contact us at support@batch52.com. We will respond to your request within thirty (30) days.

For Customers of Baker storefronts: Because Bakers are the data controllers for their customer data, please direct data access, correction, or deletion requests to the Baker whose storefront you interacted with. If you are unable to reach the Baker, you may contact us and we will make reasonable efforts to assist.

12. Children's Privacy

The Service is not directed to individuals under the age of eighteen (18). We do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information. If you believe we have inadvertently collected information from a child under 18, please contact us at support@batch52.com.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated Privacy Policy on this page and updating the “Last Updated” date above. For material changes, we will also notify registered Bakers by email. We encourage you to review this Privacy Policy periodically. Your continued use of the Service after changes are posted constitutes your acceptance of the revised Privacy Policy.

14. How to Delete Your Account

You have the right to delete your account and all associated data at any time. To delete your account:

Go to Settings → Cancel Account in your admin, type CANCEL, and confirm. This deletes your shop, products, orders and customer records, and disconnects any AI assistants.

Warning: This action is permanent and cannot be undone.

Deleting your account permanently removes:

• Your user account and profile;
• Your business site and storefront;
• All products, orders, and order history;
• All customer information associated with your storefront;
• AI-generated text and your site content;
• Your AI assistant connections (Section 7A); and
• Your Stripe or Square connection (your Stripe or Square account itself is not affected).

Copies of image files you uploaded or generated may remain in our storage and content-delivery caches after your account records are deleted, where they are no longer linked to you or your shop. Email support@batch52.com to have them removed.

We recommend downloading any content you wish to retain before deleting your account. Once deleted, your data cannot be recovered.

15. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Right Speed, LLC d/b/a Batch52

Email: support@batch52.com