+1,000 credits on all plans · Ends March 16

Privacy Policy

Last updated: February 26, 2026

1. Introduction

This Privacy Policy explains how Batch Banana ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you use our website, applications, and AI image generation services (collectively, the "Services"). By using our Services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Information You Provide

  • Account information. When you create an account, we collect your name, email address, and password.
  • Payment information. When you subscribe to a paid plan or purchase credits, we collect billing details through our third-party payment processor. We do not store full credit card numbers on our servers.
  • Content you create. We collect the text prompts, reference images, and configuration settings you provide to generate images.
  • Communications. If you contact us for support, we collect your name, email, and the contents of your message.

Information Collected Automatically

  • Usage data. We collect information about how you interact with our Services, including pages visited, features used, generation history, and timestamps.
  • Device information. We collect your IP address, browser type, operating system, device identifiers, and screen resolution.
  • Cookies and similar technologies. We use cookies and similar tracking technologies to maintain your session, remember your preferences, and analyze usage patterns. See Section 7 for details.

3. How We Use Your Information

We use the information we collect to:

  • Provide and maintain the Services, including processing your image generation requests, managing your account, and handling payments.
  • Improve and develop the Services, including analyzing usage patterns, diagnosing technical issues, and developing new features.
  • Communicate with you, including sending account notifications, responding to support requests, and providing service updates.
  • Ensure safety and security, including detecting and preventing fraud, abuse, and unauthorized access.
  • Comply with legal obligations, including responding to legal requests and enforcing our Terms of Service.

4. Image Data and AI Processing

This section explains how we handle the images and prompts you provide.

  • Your prompts and generated images are processed to fulfill your generation requests and stored in your account for your continued access.
  • We do not use your prompts, uploaded images, or generated outputs to train or fine-tune AI models. Your creative inputs remain your own.
  • Third-party AI providers process your generation requests on our behalf. These providers are contractually prohibited from using your data for model training or improvement.
  • Generated images are stored on our infrastructure (Cloudflare R2) and served through our content delivery network. You can delete your images at any time from your library.

5. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

  • Service providers. We share information with third-party vendors who help us operate our Services, including cloud hosting (Convex, Cloudflare), payment processing, analytics, and email delivery. These providers are bound by contractual obligations to protect your data.
  • AI model providers. Your prompts and reference images are sent to third-party AI model providers solely for the purpose of generating images. These providers are contractually prohibited from retaining or using your data beyond fulfilling the generation request.
  • Legal requirements. We may disclose your information if required by law, subpoena, or other legal process, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
  • Business transfers. In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change.

6. Data Retention

  • Account data is retained for as long as your account is active. If you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.
  • Generated images are retained until you delete them or close your account.
  • Usage logs are retained for up to 12 months for analytics and security purposes, then aggregated or deleted.
  • Payment records are retained as required by applicable tax and financial regulations.

7. Cookies and Tracking Technologies

We use the following types of cookies:

  • Essential cookies are required for the Services to function, including authentication and session management.
  • Analytics cookies help us understand how you use the Services so we can improve them. We use privacy-focused analytics that do not track you across other websites.
  • Preference cookies remember your settings, such as theme preference and workspace configuration.

You can control cookies through your browser settings. Disabling essential cookies may prevent you from using certain features of the Services.

8. Data Security

We implement industry-standard security measures to protect your information, including:

  • Encryption of data in transit (TLS/HTTPS) and at rest.
  • Secure authentication with hashed passwords and session management.
  • Access controls limiting employee access to personal data on a need-to-know basis.
  • Regular security assessments and monitoring.

No method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

  • Access. Request a copy of the personal information we hold about you.
  • Correction. Request correction of inaccurate or incomplete personal information.
  • Deletion. Request deletion of your personal information, subject to legal retention requirements.
  • Portability. Request a copy of your data in a portable format.
  • Objection. Object to certain processing of your personal information.
  • Withdraw consent. Where processing is based on consent, withdraw your consent at any time.

To exercise any of these rights, contact us at the address in Section 13. We will respond within 30 days.

California Residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your information, and the right to opt out of the sale of your personal information. We do not sell personal information.

10. Children's Privacy

Our Services are not intended for children under the age of 13 (or the minimum digital consent age in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will promptly delete it.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States. These countries may have different data protection laws than your jurisdiction. By using our Services, you consent to the transfer of your information to these countries. We take appropriate safeguards to ensure your information remains protected in accordance with this policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of the Services after changes are posted constitutes your acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

Batch Banana Email: privacy@batchbanana.com