Last updated: 30 September 2026
The controller of your personal data is OneDev IT Solutions Kamil Stępniewski, ul. Jutrzenki 114C lok. 6, 02-230 Warszawa, Poland · NIP 7011093049 · REGON 522326861. For anything related to your data, write to [email protected].
Account data: first and last name, email address, company name, a hashed password, and the date you accepted the Terms of Service. Content: requirements, attachments and generated files you create in the app. It contains personal data only if you choose to include it. Billing data: plan, payment status, the date you accepted the order terms and requested immediate start, and — where you ask for an invoice — company name, tax ID, billing address and billing email. Card details are handled by Stripe; we never see or store them. Technical data: IP address and request data needed to run the service, secure it and prevent abuse.
We process your data to create and run your account and provide the service, including generating content from your requirements (Art. 6(1)(b) GDPR — performance of a contract); to issue invoices and keep accounting records (Art. 6(1)(c) GDPR — legal obligation); and to secure the service, prevent abuse, handle support requests and establish or defend legal claims (Art. 6(1)(f) GDPR — our legitimate interests). Providing account data is voluntary but necessary to use the service.
Requirements, attachments and generated files are deleted automatically 12 hours after creation. Account data is kept while your account exists and deleted after you ask us to close it, except where we must keep it longer. Invoices and accounting records are kept for the period required by tax law (generally 5 years from the end of the year in which the tax obligation arose). Data needed to defend legal claims is kept until those claims expire. Technical and security data is kept only as long as needed for security, abuse prevention and troubleshooting.
We use the following providers, who process data on our behalf: Anthropic (AI generation — receives the requirements and attachments you submit), Stripe (payments and subscriptions), Resend (transactional email) and Cloudflare (hosting, database, file storage and bot protection via Turnstile). We may also disclose data where required by law, e.g. to public authorities.
To generate the output you request, we send the relevant requirements, notes and attachments to Anthropic, which processes them on our behalf under its commercial terms. We don't sell your content, and neither we nor Anthropic use it to train AI models. Please don't put passwords, access keys, payment card details or sensitive personal data you don't need into requirements or attachments.
Some of these providers — in particular Anthropic, Stripe, Resend and Cloudflare — may process data outside the European Economic Area, including in the United States. Such transfers rely on mechanisms permitted under the GDPR, such as an adequacy decision (including the EU–US Data Privacy Framework) or the European Commission's Standard Contractual Clauses. You can request details of the safeguards by writing to the contact address above.
You have the right to access your data, have it corrected or deleted, restrict its processing, receive it in a portable format, and object to processing based on our legitimate interests. To exercise any of these, write to [email protected]. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa).
We use only cookies that are strictly necessary for the service to work: a session cookie that keeps you signed in (up to 24 hours) and a cookie confirming you passed the Cloudflare Turnstile bot check. We don't use analytics or advertising cookies. Our payment pages are hosted by Stripe, which sets its own cookies for fraud prevention.
We don't make decisions about you based solely on automated processing, including profiling, that produce legal or similarly significant effects. AI is used only to generate the content you request.
baticket is a professional tool and isn't directed at children. We don't knowingly collect children's data — if you believe a child has given us personal data, contact us and we'll delete it.
We may update this policy when our service or providers change. The current version is always available on this page; see also our Terms of Service.