Privacy Policy

Last updated: October 26, 2025

1. Introduction

Reventis ("we," "us," "our"), operating BatchJob.ai, respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

This policy complies with the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA). If you have questions about this policy, contact us at [email protected].

2. Data Controller

The data controller responsible for your personal data is:

Company: Reventis
KVK Number: 98623230
Address: Strevelsweg 700 303, Box D5099, 3083AS Rotterdam, Netherlands
Email: [email protected]

3. Information We Collect

3.1 Information You Provide

  • Account Information: Email address, password (encrypted), display name
  • Payment Information: Processed by Stripe (we do not store full card details)
  • Profile Data: Optional profile picture, preferences, settings
  • Communications: Support inquiries, feedback, correspondence

3.2 Information Automatically Collected

  • Usage Data: Messages sent, models used, timestamps, response status
  • Chat Content: Your prompts and AI-generated responses
  • Technical Data: IP address, browser type, device information, operating system
  • Analytics: Page views, session duration, interaction patterns (via Vercel Analytics)
  • Advertising Data: Conversion tracking, ad interactions, and remarketing data (via Google Ads)
  • Cookies: See our Cookie Policy for details

3.3 Information from Third Parties

  • OAuth Providers: If you sign in with Google or other providers, we receive basic profile information
  • Payment Processors: Stripe provides transaction confirmations and payment status

4. How We Use Your Information

We use your personal data for the following purposes:

4.1 Service Provision

  • Create and manage your account
  • Process AI requests and deliver responses
  • Store your chat history for future access
  • Calculate and deduct credits based on usage
  • Send service notifications about job completion

4.2 Payment Processing

  • Process subscription payments and credit purchases
  • Generate invoices and receipts
  • Prevent fraud and unauthorized transactions

4.3 Service Improvement

  • Analyze usage patterns to improve features
  • Debug technical issues and optimize performance
  • Understand user preferences and needs

4.4 Communication

  • Respond to support inquiries
  • Send important service updates and security alerts
  • Notify you of policy changes
  • Send optional marketing communications (with consent)

4.5 Advertising and Marketing

  • Track conversions and measure advertising effectiveness
  • Show relevant advertisements on Google and partner websites
  • Analyze user behavior to improve marketing campaigns
  • Create remarketing audiences (you can opt-out via Google Ads Settings)

4.6 Legal Compliance

  • Comply with legal obligations
  • Enforce our Terms of Service
  • Protect our rights and prevent misuse

5. Legal Basis for Processing (GDPR)

We process your personal data based on:

  • Contract Performance: Processing necessary to provide the Service you requested
  • Legitimate Interests: Improving our Service, preventing fraud, ensuring security
  • Legal Obligation: Complying with tax, accounting, and regulatory requirements
  • Consent: Marketing communications, optional analytics (where required)

6. Data Sharing and Disclosure

We share your data only in the following circumstances:

6.1 Service Providers

  • Supabase: Database hosting and authentication (EU/US data centers)
  • Stripe: Payment processing (PCI DSS compliant)
  • OpenAI: AI model inference (prompts and responses)
  • Vercel: Hosting, analytics, and performance monitoring
  • Google: Advertising, conversion tracking, and remarketing (Google Ads)

6.2 Legal Requirements

We may disclose your information if required by law, court order, or to:

  • Comply with legal processes
  • Protect rights, property, or safety
  • Investigate fraud or security issues
  • Enforce our Terms of Service

6.3 Business Transfers

If Reventis is acquired or merged, your data may be transferred to the new entity. You will be notified of any such change.

7. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States. We ensure appropriate safeguards are in place:

  • Standard Contractual Clauses (SCCs) with service providers
  • Privacy Shield certified providers (where applicable)
  • GDPR-compliant data processing agreements

8. Data Retention

We retain your data as follows:

  • Account Data: Until you delete your account, plus 30 days for recovery
  • Chat History: Stored indefinitely unless you delete it
  • Payment Records: 7 years (tax and legal requirements)
  • Analytics Data: Aggregated data retained indefinitely, individual data 26 months
  • Support Communications: 3 years after resolution

9. Your Privacy Rights

9.1 GDPR Rights (European Economic Area)

You have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Delete your data ("right to be forgotten")
  • Restriction: Limit how we use your data
  • Portability: Receive your data in a machine-readable format
  • Object: Object to processing based on legitimate interests
  • Withdraw Consent: Withdraw consent for marketing or optional processing
  • Complain: Lodge a complaint with your local data protection authority

9.2 CCPA Rights (California Residents)

California residents have the right to:

  • Know what personal information we collect, use, and share
  • Delete personal information (subject to exceptions)
  • Opt-out of the sale of personal information (we do not sell data)
  • Non-discrimination for exercising privacy rights

9.3 How to Exercise Your Rights

To exercise any of these rights, email us at [email protected]. We will respond within 30 days. You may also manage some data directly in your account settings.

10. Data Security

We implement industry-standard security measures to protect your data:

  • Encryption in transit (TLS/SSL) and at rest
  • Secure password hashing (bcrypt)
  • Regular security audits and vulnerability assessments
  • Access controls and authentication for our systems
  • Automatic backups and disaster recovery procedures

However, no system is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.

11. Children's Privacy

Our Service is not directed to individuals under 18. We do not knowingly collect data from children. If you believe a child has provided us with personal information, contact us immediately at [email protected].

12. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for their privacy practices. Review their privacy policies before providing any information.

13. Do Not Track

We do not currently respond to "Do Not Track" browser signals. You can control cookies through your browser settings (see our Cookie Policy).

14. Advertising and Your Choices

We use Google Ads to track conversions and display relevant advertisements. You can control advertising tracking:

  • Google Ads Settings: Opt-out of personalized ads at Google Ads Settings
  • Browser Settings: Block third-party cookies in your browser settings
  • Ad Blockers: Use browser extensions that block advertising trackers
  • NAI Opt-Out: Visit the Network Advertising Initiative opt-out page

Note: Opting out of personalized ads does not mean you will see fewer ads, only that they will be less relevant to you.

15. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be notified via email or Service notification. The "Last updated" date at the top indicates the latest revision.

16. Contact Us

For privacy-related questions or to exercise your rights, contact us:

Email: [email protected]
Company: Reventis
Address: Strevelsweg 700 303, Box D5099, 3083AS Rotterdam, Netherlands
KVK: 98623230

17. EU Representative

For GDPR inquiries from EEA residents, you may contact us at the address above. We are established in the Netherlands.