Privacy Policy

Last updated: July 12, 2026

Batch 9 (“Batch 9,” “we,” “us”) runs a pilot in Toronto that lets restaurants post time-boxed, crowd-threshold meal deals, and lets diners subscribe to them for free — a card is only charged if enough people join before the deadline. This policy explains what personal information we collect to make that work, why we collect it, and what control you have over it.

Who we are

Batch 9 is operated as a small independent pilot based in Toronto, Ontario, Canada. We currently serve one neighborhood while we test the product with real diners and restaurants. If you have questions about this policy or your data, see Contact us below.

Information we collect

We collect information in a few different ways, depending on how you use Batch 9:

Account information

Email address, used to create your account and sign you in (magic link or password).
Password, if you choose password sign-in — this is hashed by our authentication provider; we never see or store it in plain text.
Phone number, only if phone sign-in is enabled and you choose to use it.
A one-time TOTP secret if you turn on two-factor authentication, generated and verified through our authentication provider.

Profile information

Display name and, optionally, a profile photo.
A home address you choose to save, plus its geocoded coordinates — this lets us default the deals map to your neighborhood instead of asking for your location every visit.
Favorite cuisines, used to help you find relevant deals.

Location information

If you use “Near me,” your browser’s reported location (latitude/longitude) is sent to us for that page load only, to sort and filter deals by distance — it is not saved unless you separately choose to save it as your home address.
If you search by address, the text you type is sent to Google’s Places API (through our server, so the request never exposes any API key to your browser) to suggest matches and resolve them to coordinates.

Deal and subscription activity

Which deals you subscribe to, the pickup slot you choose, and the resulting status of your subscription (held, confirmed, released, refunded, or redeemed).
A pickup code used to verify redemption at the restaurant counter.

Reviews

Star ratings and comments you leave for a restaurant, which are only permitted once you’ve subscribed to one of that restaurant’s deals, and are displayed publicly on the restaurant’s page alongside your display name.

Restaurant owner information

If you post deals as a restaurant, we collect your restaurant’s name, address, contact phone/email, cuisine, menu items, and photos, all of which are shown publicly to diners.

A note on payments: Batch 9 is currently in a test phase where no real money changes hands — subscribing to a deal simulates a card hold and charge without processing a real payment. We do not currently collect or store real payment card details. When real payments launch, we will update this policy to describe how a payment processor handles that information (we do not intend to store full card numbers ourselves).

How we use your information

To create and secure your account, and to let you sign in.
To show you relevant, nearby deals and to let restaurants reach subscribers.
To operate the crowd-threshold mechanic itself — tracking subscriber counts, deadlines, and pickup slots.
To notify you by email about deals you’ve subscribed to (for example, if a restaurant edits or cancels a deal).
To display reviews and restaurant ratings.
To detect and prevent abuse of the platform (for example, duplicate or fraudulent subscriptions).

We do not sell your personal information. We share it only with the service providers that help us run Batch 9, each acting on our behalf:

Supabase — our database, authentication, and file storage provider. Your account, profile, and deal data is stored on their infrastructure.
Google (Places/Maps APIs) — used server-side to autocomplete addresses, geocode locations, and look up restaurant ratings. Address text you search is sent to Google for this purpose.
Resend — our transactional email provider, used to send deal-update notifications.
Vercel — our hosting provider, which serves the site and processes requests to it.

We may also disclose information if required by law, or to protect the rights, safety, or property of Batch 9, our users, or the public.

Cookies & sessions

We use a session cookie set by our authentication provider to keep you signed in between visits. We don’t use third-party advertising or tracking cookies.

Data retention & deletion

We keep your account and profile information for as long as your account is active. If you delete your account (or ask us to — see Contact us), we delete your profile information, subject to keeping minimal transaction records (such as subscription history) where needed to prevent fraud or meet legal obligations. Public reviews you’ve written may be retained in de-identified form unless you specifically ask for them to be removed.

Your rights & choices

You can, at any time:

View and edit most of your profile information directly from your account.
Ask us for a copy of the personal information we hold about you.
Ask us to correct inaccurate information.
Ask us to delete your account and associated personal information.
Withdraw consent to location access at any time through your browser’s permission settings — this only limits “Near me,” not your ability to browse or search deals.

To exercise any of these, email us — see Contact us.

Children’s privacy

Batch 9 is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us and we’ll delete it.

Security

We use industry-standard measures to protect your information, including encrypted connections (HTTPS) and database-level access controls that restrict who can read or write your data. No system is perfectly secure, so we can’t guarantee absolute security, but we work to keep your information safe and will notify affected users if we become aware of a breach involving personal information, as required by law.

Where your data is processed

Batch 9 currently operates only in Toronto, Ontario, and this policy is written with Canadian privacy law (PIPEDA) in mind. Our service providers may process data on servers located outside Canada. If we expand to serve other regions with additional privacy requirements (for example, the EU), we will update this policy accordingly.

Changes to this policy

We may update this policy as Batch 9 evolves — particularly once real payments launch. We’ll post the revised policy here with an updated “last updated” date, and if a change is significant, we’ll make a reasonable effort to notify you directly.

Contact us

Questions about this policy or your personal information? Email us at privacy@batchnine.com.