Privacy Policy

1. Introduction

This Privacy Policy explains how BataData, Inc. (“BataData,” “we,” “us,” or “our”) collects, uses, and protects information in connection with BataDB, our managed serverless Postgres platform (the “Service”). It applies to our website, dashboard, command-line interface, and API.

2. Information We Collect

• Account information — such as your name, email address, organization, and authentication credentials.
• Billing information — processed through our payment provider; we do not store full card numbers on our systems.
• Usage and telemetry — such as project, branch, and compute metadata, API requests, log data, and diagnostic information used to operate and improve the Service.
• Customer Data — the database content you store in the Service. We process this data on your behalf and only as needed to provide the Service.

3. How We Use Information

We use information to provide, maintain, secure, and improve the Service; to authenticate users and manage accounts; to process payments; to communicate with you about your account and important changes; to monitor performance and prevent abuse; and to comply with legal obligations. We do not sell your personal information, and we do not use Customer Data to train machine learning models.

4. Data Processing & Roles

With respect to Customer Data, you act as the data controller and BataData acts as the data processor, processing Customer Data according to your instructions and these terms. With respect to account and billing information, BataData acts as the data controller. We process data only for the purposes described in this policy or as otherwise authorized by you.

5. Subprocessors

We rely on a limited set of third-party subprocessors to provide the Service, including cloud infrastructure, payment processing, email delivery, and error monitoring providers. A current list of subprocessors is available on request and will be published here.

6. Security

We implement technical and organizational measures designed to protect information against unauthorized access, disclosure, alteration, and destruction. These include encryption in transit, access controls, credential hashing, and infrastructure isolation. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for safeguarding your credentials and API keys.

7. Data Retention

We retain account and usage information for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Customer Data is retained while your projects exist and for a reasonable period after deletion or account termination, after which it is removed from active systems. You are responsible for exporting any data you wish to keep.

8. International Transfers

The Service is operated on cloud infrastructure that may process data in regions you select or in the United States. Where data is transferred across borders, we take steps intended to ensure it receives an appropriate level of protection consistent with applicable law.

9. Your Rights

Depending on your location, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can manage much of your account information directly in the dashboard. To exercise other rights, or if you have questions, contact us using the details below.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

11. Contact

For privacy questions or requests, contact us at support@batadata.com. See also our Terms of Service.