Subprocessors

Last updated: 2026-11-07

These outside companies help us run BatchLab. Each one handles some of your data on our behalf. We list what each one sees and why.

We do not sell data and we do not use ad or analytics companies. Before we add a company that handles your records, we update this page and email the account owner at least 30 days ahead. If we must switch faster to keep BatchLab running or safe, we tell you as soon as we can.

Cloudflare

What it does
Hosts BatchLab. Runs our database and file storage. Provides the bot check on sign-in (Turnstile) and rate limiting.
Data it handles
Everything stored in BatchLab: account email, business details, your records, and your photos. It also sees IP addresses of visitors, and the browser signals used for the bot check on the sign-in step.
Location
United States. Our database and file storage are kept in the US. Requests pass through Cloudflare's worldwide network on the way, and shared pictures may be cached near the person viewing them.
Status
In use.
Their privacy page
cloudflare.com/privacypolicy

Stripe

What it does
Takes payments and runs subscriptions and billing. It also sends your receipts, yearly renewal reminders and failed-payment emails.
Data it handles
Your name or business name, email, card details, billing address, and payment history. We never see your full card number. Stripe also uses some of this data for its own fraud checks, under its own privacy policy.
Location
Stripe, LLC is a US company. It may process data in other countries under its own safeguards.
Status
In use.
Their privacy page
stripe.com/privacy

Resend

What it does
Sends the sign-in code emails. It sends nothing else.
Data it handles
Your email address and the text of the email it sends. It keeps sending logs for 30 days.
Location
United States.
Status
In use.
Their privacy page
resend.com/legal/privacy-policy

Anthropic

What it does
Runs the optional AI features: invoice reading, Ask your data, and the shop email drafter.
Data it handles
Invoice reading: the photo or PDF you upload, and what it reads from it, such as supplier names and prices. Ask your data: only the question you type and today's date, never your records. Shop email drafter: only the pitch details you fill in (your business name and first name, the shop's name, contact first name and city, your note, products and prices, minimum order and lead time). Nothing is sent unless you use a feature.
How long it keeps it, and whether it trains on it
Under its commercial terms, Anthropic deletes what we send and what it returns within 30 days and does not train its models on it. If its safety systems flag a request as breaking its usage policy, or the law requires it, it may keep that request longer.
Location
Anthropic, PBC is a US company. It may process data in other countries under its own safeguards.
Status
Optional. Only used when you use one of these features.
Their privacy page
anthropic.com/legal/privacy

Google

What it does
Hosts the mailbox for support@getbatchlab.com. Cloudflare passes those emails on to it.
Data it handles
Your email address and whatever you write or attach when you email us. It does not hold your BatchLab records.
Location
Google LLC is a US company. It may process data in other countries under its own safeguards.
Status
In use.
Their privacy page
policies.google.com/privacy

Changes to this list

We update the date at the top when this list changes. Questions: support@getbatchlab.com.