What we collect and who can see it

What we collect

Account details you give us: your name, email address, company name and the details of the brands and manufacturing sites you set up.

The production data you enter or import: products, recipes, suppliers, costs, runs, batch records, photographs and messages between you and the companies you work with.

If you connect a store, order and product data read from it. We do not read customer names, addresses or payment details, and we never write anything back.

Basic technical data — IP address, browser and pages visited — used to keep the service running and secure.

Who can see it

People you invite to your workspace, according to the roles you give them.

A contract manufacturer you link to can see what they need to make your product: the run, the recipe as a batch sheet, the deliveries and the schedule. They cannot see your ingredient prices, your margins or your sell prices. Where they supply the ingredients, that split changes accordingly.

Nobody else. We do not sell data, we do not share it with advertisers, and we do not use your production data to train anything.

Where it lives

On Supabase (Postgres) and Netlify, both of which we access under contract. Data is encrypted in transit and at rest, and access between tenants is enforced at the database level rather than only in the application.

Store credentials are encrypted before they are stored, so a database dump does not expose them.

Your rights

You can export or delete your data at any time. Deleting an account removes your workspace; records of work done jointly with a manufacturer remain visible to that manufacturer for their own compliance obligations, which is the same expectation that applies on paper.

If you are in the UK or EU you have the rights the UK GDPR and GDPR give you — access, correction, erasure, portability and objection. Email hello@getnextbatch.com and we will act on it.