Last updated: January 11, 2025

This Privacy Policy (”Policy”) describes how Batch, Inc. (”Batch,” "we," "us," "our") collects, uses and protects your personal data in compliance with applicable laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other domestic and international privacy regulations, when you use our website and services (the “Services”). Capitalized terms not defined in this Policy have the meaning given to them in the Terms of Service. By using the Services, you agree to this Policy. If you do not agree with this Policy, do not use the Services.

Table of contents

Roles and scope

This Privacy Policy applies when we determine the purposes and means of processing personal data for our own operations (i.e., when we act as a “controller” under GDPR or a “business” under CCPA), such as when you create an account, visit our website, manage billing, or receive support. When we process personal data solely on behalf of a customer in accordance with their instructions (i.e., when we act as a “processor” under GDPR or a “service provider” under CCPA), such as when a customer uploads and sends a document to participants for signing, the customer determines the purposes and means of processing, the processing is governed by a data processing agreement with the customer, and this Privacy Policy does not apply. If you have questions or wish to exercise rights relating to personal data processed by us on a Customer’s behalf, please contact them directly.

Types of personal data we collect

We may collect and process the following types of personal data:

• Contact and account data: Your name, email address, password, company name (if applicable), electronic signatures, cell phone number (for two-factor authentication if enabled), billing and payment details, webhooks (if used), and customer service interactions.
• Usage data: Your IP address, browser type, operating system, device information, and how you use the Services, including activity logs and interactions.
• Participant data: The names, email addresses, cell phone numbers (if SMS signing or two-factor authentication is used) of singing participants, and their usage data during transactions.
• Customer data: Data provided by you and your End Users when sending or signing documents.

How we collect personal data

We collect data through various methods, including:

• Direct interactions: We collect personal data when you complete a sign request, fill out forms, create an account, or contact us directly.
• Automated technologies: We automatically collect technical data, such as your IP address and device information using cookies and other similar technologies. To learn more about the types of cookies we use, and how to disable them, review our Cookie Policy.
• Third-party sources: We may receive personal data about you from business partners, service providers and others when they are legally allowed to share your personal data with us.
• Customers: We may receive personal data about you from other customers when they use the Services to send you a sign request or participate in our rewards program.

How we use your personal data

We may use your personal data for the following general purposes: