Privacy Policy

Your media files

BatchMeta processes your photos and videos inside your browser. Original files are never uploaded to or stored on our servers. When you run an analysis, only small, downscaled preview frames are transmitted to the selected AI provider for the sole purpose of generating metadata, and they are not retained by us afterwards.

What we store

We store your account email, your credit balance and transaction history, and the text metadata generated for each analysis (titles, descriptions, keywords) together with a small thumbnail so you can revisit and re-export your history. If you type a note or context for an analysis, that text is sent to the AI provider and saved with the history record. If you turn on location (GPS) extraction, the exact coordinates read from a photo are sent to the provider and stored on the history record as well; location extraction is off by default. You can delete history records at any time from the History page.

Who else sees your data

The AI provider you pick for an analysis — OpenAI, Anthropic or Google — receives the downscaled frames, your note, and the coordinates if you enabled location extraction. What we pay them for is that single request: they do not use it to train their models.

A few other providers run the parts of the service you would expect: hosting, the database that holds your account and history, payments, the bot check on the sign-in forms, and email delivery. Each of them only processes what its own job needs. They are based in, or process data in, the United States, and their data-processing terms include the standard contractual clauses used for international transfers. We do not sell your data, and we do not share it for advertising.

API keys

If you use your own API key (BYOK mode), the key is held only in your browser's memory for the current session. It is never written to browser storage and reloading the page clears it. It is transmitted to our server only transiently to forward your analysis request to the provider you chose, and it is never logged or stored server-side.

One thing worth knowing when you bring your own key: what the provider does with those requests is governed by your account with them, not by us. Google's free Gemini tier, for example, permits Google to use submitted content to improve its models, while the paid tiers do not.

Payments

Payments are processed by Stripe. We never see or store your card details; we record only the purchase (pack, amount, currency) needed to credit your account.

Cookies & analytics

Two cookies are strictly necessary and always active: the sign-in session cookie that keeps you logged in, and the record of your cookie choice itself (stored in your browser, not sent to us). We also measure page views with Vercel Web Analytics, which uses no cookies and cannot follow you between days or across sites.

Google Analytics is optional and off until you accept it. If you accept, Google sets the _ga cookies on your device (up to two years) and receives your page URL, approximate location, and device and browser details. Declining loads nothing at all — no Google script is requested. You can change your mind at any time, and declining after having accepted also deletes the cookies that were already set. We run no advertising or social-media tracking pixels.

Security & abuse prevention

When you create an account we log the sign-up's IP address to enforce anti-abuse limits — for example, capping how many new accounts can be created from one network per day and blocking disposable-email domains. The sign-in forms are protected by Cloudflare Turnstile, which sees your IP address and browser characteristics while it checks that you are not a bot, and we count requests per account and per IP to enforce rate limits.

Some of these checks are automatic: a sign-up can be refused, or a free-credit bonus withheld, without a person looking at it. If you think that happened to you unfairly, email us and a human will review it.

Everything runs over HTTPS, access to the database is restricted per user at the database level, and your API key is never written to disk. No system is perfectly safe; if a breach ever affects your personal data, we will notify you and the relevant authority as required.

How long we keep it

Your account, history and credit balance stay until you delete them — individual records from the History page, everything at once from account settings. Sign-up IP logs are kept only for the short window the abuse limits need, and rate-limit counters expire within a day. Purchase records outlive the account, but only in de-identified form, because tax and accounting law requires us to keep them.

Deleting your account

You can permanently delete your account at any time from your account settings. Deletion erases your profile, sign-in credentials and your entire analysis history (including titles, keywords, notes, any extracted location data and thumbnails), and removes any linked sign-in identity such as Google. Purchase and payment records are retained only in de-identified form — no longer linked to you — for as long as tax and accounting law requires and to resolve any payment disputes. Any remaining credits are forfeited on deletion and are not refundable.

Children

BatchMeta is made for adults: you need to be 18 or older to have an account. We do not knowingly collect data from children, and if you believe a child has created an account, email us and we will remove it.

Contact & changes

Questions, requests or complaints about this policy: team@batchmeta.com. If we change this policy we will update the date at the top of this page, and we will tell you about any material change before it takes effect.