Privacy

Last updated 11 October 2026.

Lounge Fleet, LLC d/b/a Batchrate operates Batchrate and processes account data and the prompts you submit to run batch jobs and bill for them.

What we store

• Account email, a PBKDF2-SHA256 password hash, and whether the email is verified.
• Session cookies. The cookie is a random token signed with HMAC. Only the SHA-256 of the token is stored.
• API keys as a SHA-256 hash and a short prefix. The full key is not stored.
• Batch files, request bodies, outputs, token counts, and credit records.
• Stripe customer email and checkout identifiers needed to credit a payment. Card numbers stay with Stripe.
• Contact messages, encrypted at rest.

Why

We use this data to sign you in, run your jobs, bill for completed tokens, prevent abuse, and answer support messages. We do not sell personal data.

Subprocessors

Cloudflare hosts the site, database, file storage, and rate-limit counters, and sends verification, password-reset, receipt, and contact mail through Cloudflare Email Service from noreply@batchrate.ai. Stripe processes payments. Compute and infrastructure providers process prompts to produce completions.

Retention

Input files are deleted 7 days after every batch that used them reaches a terminal state, or 7 days after upload if the file is never used. Output and error files are deleted 30 days after they are created. You can delete a file sooner. Deletion removes the file immediately. Ask contact if you want an account closed. We keep the credit records required for accounting.

Cookies

A session cookie keeps you signed in to the console and is not available to page scripts. The API uses a bearer key.