Last updated: February 27, 2026
BatchWork is operated from the Netherlands. This policy explains how we collect, use, and protect your data in compliance with the General Data Protection Regulation (GDPR).
Account data: When you sign up, we store your email address, name (optional), hashed password, and account creation date. If you sign in via Google, we receive your email, name, and profile picture from Google.
Usage data: We log which tools you use, when, and from which IP address. This is used for rate limiting and service improvement.
Payment data: If you subscribe to Pro, payment processing is handled by Mollie. We store your Mollie customer ID and subscription status. We never see or store your card details.
Analytics: We use Umami (self-hosted, cookie-free analytics) to understand site traffic. Umami does not collect personal data and does not use cookies.
Files: Files you upload are temporarily stored for processing only. They are automatically deleted within 2 hours. We do not read, analyze, or retain your file contents.
Contract performance: Processing your account and files is necessary to provide the service you requested.
Legitimate interest: Usage logging for rate limiting and security. Analytics for service improvement.
Consent: Marketing communications (if any) are only sent with your explicit consent.
We use your data to: provide the file conversion service, manage your account and subscription, enforce rate limits, prevent abuse, improve the service, and communicate important updates about your account.
We do not sell your data. We share data only with:
Mollie: Payment processor (Netherlands-based, GDPR compliant) — for subscription billing.
Hetzner: Server hosting provider (Germany-based, GDPR compliant) — where data is physically stored.
Google: Only if you choose to sign in with Google — we receive basic profile information from Google's OAuth service.
Your data is stored on servers in Germany (Hetzner, Nuremberg). Passwords are hashed using industry-standard algorithms (scrypt/pbkdf2). All connections are encrypted via TLS/SSL. Uploaded files are automatically deleted within 2 hours of processing.
Under the GDPR, you have the right to:
Access: Request a copy of all data we hold about you.
Rectification: Correct inaccurate data via your account page.
Erasure: Delete your account and all associated data from your account page.
Data portability: Request your data in a machine-readable format.
Objection: Object to processing based on legitimate interest.
Restriction: Request we limit how we process your data.
To exercise any of these rights, email support@batchwork.shop. We will respond within 30 days.
Essential cookies: We use a session cookie to keep you logged in. This is strictly necessary and does not require consent.
Analytics: Umami is cookie-free and does not track individual users.
Cookie consent: We display a cookie consent banner in compliance with EU ePrivacy regulations. If you decline, analytics scripts are disabled.
Account data is kept for as long as your account exists. When you delete your account, all personal data is immediately removed. Usage logs are retained for 90 days for abuse prevention, then purged. Uploaded files are deleted within 2 hours.
BatchWork is not intended for children under 16. We do not knowingly collect data from children under 16.
We may update this policy. Material changes will be communicated via email to registered users. The "last updated" date at the top will reflect the most recent revision.
For privacy questions or to exercise your rights:
Email: support@batchwork.shop
If you're unsatisfied with our response, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.