Privacy Policy

Last Updated: February 7, 2026

1. Introduction

This Privacy Policy describes how Right Speed, LLC, a Michigan limited liability company doing business as Batch52 (“Batch52,” “we,” “us,” or “our”), collects, uses, shares, and protects personal information when you use the Batch52 platform, website (batch52.com), and all related services (collectively, the “Service”).

This Privacy Policy applies to two categories of users:

• Bakers: Users who create accounts and operate storefronts on the Service; and
• Customers: Visitors who browse Baker storefronts and may place orders or submit inquiries.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.

2. Information We Collect

2.1 Information from Bakers

When you create an account and operate a storefront, we collect:

• Account Information: Name, email address, and authentication credentials;
• Business Information: Business name, description, location, contact information, and pickup/delivery details;
• Product Information: Product names, descriptions, pricing, images, categories, and allergen information;
• Payment Account Information: Stripe Connect account details necessary to facilitate payment processing (note: Batch52 does not store your bank account numbers, routing numbers, or full credit card numbers — these are handled exclusively by Stripe); and
• Site Configuration: Theme preferences, custom domain settings, and storefront customizations.

2.2 Information from Customers

When you visit a Baker storefront or place an order, we may collect:

• Order Information: Name, email address, phone number, order details, and delivery/pickup preferences;
• Payment Information: Payment processing is handled entirely by Stripe. Batch52 does not store credit card numbers or sensitive payment credentials;
• Communication Preferences: Whether you opt in to receive marketing communications from a Baker; and
• Inquiry Data: Information you provide through contact or inquiry forms on Baker storefronts.

2.3 Information Collected Automatically

When you access the Service, we automatically collect:

• Session Data: We assign a session identifier via a cookie (batch52_session) to enable core functionality such as cart persistence and site generation. This cookie has a 30-day lifetime;
• Usage Data: Page views, unique visitor counts, and cart interaction data, aggregated on a daily basis for analytics;
• Technical Data: Browser type, operating system, and general location data (we do not log or store IP addresses for analytics purposes, except as hashed values for rate limiting and abuse prevention); and
• Cart Data: Items added to shopping carts are stored locally in your browser and synchronized with our servers to enable cart persistence across sessions.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Providing the Service: To operate, maintain, and improve the Batch52 platform, including storefront hosting, order processing, and payment facilitation;
• AI Content Generation: To generate website content, product descriptions, and images using artificial intelligence services (see Section 7);
• Communication: To send transactional emails (order confirmations, status updates), account notifications, and, with your consent, marketing communications;
• Analytics: To understand how users interact with the Service and to improve its functionality and user experience;
• Security: To detect, prevent, and address fraud, abuse, security issues, and technical problems;
• Legal Compliance: To comply with applicable laws, regulations, and legal processes; and
• Customer Support: To respond to your inquiries and provide assistance.

4. Data Controller and Data Processor Roles

The Service involves two distinct data processing relationships:

Batch52 as Data Controller: For Baker account data, platform usage data, and data necessary to operate the Service, Right Speed, LLC acts as the data controller and determines the purposes and means of processing.

Batch52 as Data Processor: For Customer data collected through Baker storefronts (order information, customer contact details, marketing preferences), Batch52 acts as a data processor on behalf of the Baker. The Baker is the data controller for their customer data and is responsible for:

• Obtaining appropriate consent from their customers for data collection and processing;
• Complying with applicable data protection laws regarding their customer data;
• Responding to customer data access, correction, and deletion requests; and
• Ensuring that their use of customer data complies with the marketing preferences and consent given by their customers.

5. Third-Party Service Providers (Sub-Processors)

We use the following third-party service providers to operate the Service. Each provider receives only the data necessary to perform its specific function:

These providers are contractually obligated to process data only as instructed and to maintain appropriate security measures. We will update this list as providers change. For the most current list, please contact us at support@batch52.com.

6. Cookies and Tracking Technologies

We use the following cookies and similar technologies:

Essential Cookies

• batch52_session — A session identifier (UUID) stored as an HTTP-only cookie with a 30-day lifetime. This cookie is essential for core functionality including cart persistence, demo site generation, and anonymous session tracking. It does not contain personal information.
• Authentication cookies — Managed by our authentication provider (Clerk) to maintain your login session. These are set only for registered Baker accounts.

Analytics

We use Google Analytics to collect anonymized usage data. Google Analytics may set its own cookies. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

Local Storage

We use browser local storage to persist your shopping cart contents (batch52_bag) with a 7-day expiry. This data is stored only in your browser and is not transmitted to our servers until you proceed to checkout.

7. AI and Automated Processing

Batch52 uses artificial intelligence services to provide certain features, including site generation, content creation, and image generation. When you use these features:

• Business descriptions and prompts you provide may be sent to third-party AI providers (OpenAI, Runware) for processing;
• AI providers process this data according to their own privacy policies and data processing agreements;
• We do not send personal customer data (names, emails, phone numbers, order details) to AI providers;
• AI-generated outputs are stored on our platform and associated with your account; and
• We do not use your personal data or customer data to train AI models.

8. Email Communications

We send the following types of email communications:

Transactional Emails

Order confirmations, status updates, account notifications, and security alerts. These are necessary for the operation of the Service and cannot be opted out of while you maintain an account.

Marketing Emails

Bakers may send marketing communications (announcements, promotions, newsletters) to customers who have opted in to receive them. Each marketing email includes an unsubscribe link. We maintain suppression lists to honor unsubscribe requests, bounces, and spam complaints in compliance with the CAN-SPAM Act.

To unsubscribe from a Baker's marketing emails, click the unsubscribe link in any email, or contact the Baker directly.

9. Data Security

We implement appropriate technical and organizational security measures to protect your personal data, including:

• Encryption of data in transit (TLS/HTTPS) and at rest;
• Row-level security (RLS) policies to ensure strict data isolation between tenants;
• Secure authentication via industry-standard providers;
• Regular security monitoring and error tracking; and
• Access controls limiting data access to authorized personnel and systems.

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we commit to promptly notifying affected users in the event of a data breach as required by applicable law.

10. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Demo Sites: If you generate a demo site without creating an account, the site and all associated data will be automatically deleted after seven (7) days. To keep your site, you must create an account and claim the demo site before the 7-day period expires.
• Baker Accounts: Data associated with your account is retained until you delete your account (see Section 14). We may retain certain data for a reasonable period after deletion to comply with legal obligations, resolve disputes, and enforce our agreements.
• Customer Order Data: Order data is retained by the Baker's storefront for as long as the Baker maintains their account. When a Baker deletes their account, all associated customer data is permanently deleted.
• Cart Data: Abandoned server-side cart data is periodically cleaned up. Browser-stored cart data expires after 7 days.
• Analytics Data: Aggregated, anonymized analytics data may be retained indefinitely as it does not contain personal information.

11. Your Privacy Rights

Depending on your location and applicable law, you may have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you;
• Right to Correction: Request correction of inaccurate or incomplete personal data;
• Right to Deletion: Request deletion of your personal data (subject to legal retention obligations);
• Right to Restrict Processing: Request that we limit how we use your data;
• Right to Data Portability: Request your data in a structured, machine-readable format;
• Right to Object: Object to processing of your personal data for certain purposes; and
• Right to Withdraw Consent: Withdraw consent for data processing where consent is the legal basis.

To exercise any of these rights, please contact us at support@batch52.com. We will respond to your request within thirty (30) days.

For Customers of Baker storefronts: Because Bakers are the data controllers for their customer data, please direct data access, correction, or deletion requests to the Baker whose storefront you interacted with. If you are unable to reach the Baker, you may contact us and we will make reasonable efforts to assist.

12. Children's Privacy

The Service is not directed to individuals under the age of eighteen (18). We do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information. If you believe we have inadvertently collected information from a child under 18, please contact us at support@batch52.com.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated Privacy Policy on this page and updating the “Last Updated” date above. For material changes, we will also notify registered Bakers by email. We encourage you to review this Privacy Policy periodically. Your continued use of the Service after changes are posted constitutes your acceptance of the revised Privacy Policy.

14. How to Delete Your Account

You have the right to delete your account and all associated data at any time. To delete your account:

1. Sign in to your Batch52 account;
2. Navigate to your admin dashboard;
3. Go to Settings from the navigation menu;
4. Scroll to the bottom of the page to find the Delete Account section;
5. Type DELETE in the confirmation field; and
6. Click the Delete My Account and Data button.

Warning: This action is permanent and cannot be undone.

Deleting your account will permanently remove all of your data, including:

• Your user account and profile;
• Your business site and storefront;
• All products, orders, and order history;
• All customer information associated with your storefront;
• Uploaded images and AI-generated content; and
• Your Stripe Connect integration (your Stripe account itself is not affected).

We recommend downloading any content you wish to retain before deleting your account. Once deleted, your data cannot be recovered.

15. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Right Speed, LLC d/b/a Batch52

Email: support@batch52.com