Batiami

Privacy policy

Français

Last updated: 28 October 2026

This policy explains how Batiami ("Batiami", "we") processes personal data on batiami.com and in the Batiami application (app.batiami.com and the Batiami mobile apps).

Who is responsible

Batiami. Contact for any privacy request: contact@batiami.com.

For the data of your own customers that you put into Batiami (names, addresses and details of your jobs), your company is the data controller and Batiami acts as a processor on your behalf, only to provide the service.

What data we process, and why

  • Account data (name, email, role, hashed password, language): to give you access to your company's workspace. Basis: contract.
  • Company data (identity, legal notices, past quotes, price library, house rules): to produce quotes in your format and on your prices. Basis: contract.
  • Job data (videos, photos, voice notes, plans, documents, quotes and their details): to prepare, price and generate your quotes. Basis: contract.
  • Applications on batiami.com (name, email, mobile phone, company, answers to the questions, consent): to assess whether Batiami fits your company, book and confirm your call (by WhatsApp, text message or email). Basis: consent and pre-contractual steps.
  • Technical data (server logs, notification subscriptions): security and operation of the service. Basis: legitimate interest.
  • Prospecting (business contact details of managers of construction companies): to introduce Batiami to them. Basis: legitimate interest. Details below, under "Prospecting".

We do not sell your data. We do not use your data to train artificial intelligence models.

Service providers (processors)

Batiami uses the following providers, only to run the service and, for Meta, to measure our advertising. Each one receives only the data its function needs.

In service

  • Anthropic (Claude AI model, United States): job elements are processed to produce the quote. The conversation about a job is kept by Anthropic while the job exists in Batiami, so that you can come back to it and correct the quote; it is deleted when the job is deleted, and working copies of files within 7 days. Anthropic does not use these data to train its models.
  • Supabase (database: accounts, companies, jobs and applications; company files; Frankfurt, Germany).
  • Vercel (hosting of the website and the application, servers in Frankfurt, Germany).
  • Cloudflare R2 (job files: videos, photos, plans, voice notes; European Union jurisdiction).
  • AssemblyAI (transcription of dictation, voice notes and videos, servers in the European Union): each transcript is deleted at AssemblyAI as soon as Batiami has retrieved it.
  • Google: Google Drive and its file picker, only if your company connects it (see below); fonts of the website and the application, loaded by your browser from Google's servers.
  • HighLevel (customer relationship management: applications, appointments and setup follow-up, United States).
  • Apple, Google and Mozilla push services (only if you enable notifications; the content of notifications reaches them encrypted).

Upon activation

These providers are planned but not yet in service. They receive no data until the corresponding feature is opened.

  • Stripe (payment of the subscription by card or SEPA direct debit, and invoices), upon activation of online payment.
  • Resend (sending the quote to your customers by email, with the PDF attached), upon activation of email sending.
  • WhatsApp, by Meta (appointment confirmations and reminders sent through HighLevel, if you gave your consent), upon activation of WhatsApp confirmations.
  • Meta (advertising pixel on batiami.com, only after your consent: see "Cookies"), upon activation of advertising.
  • Meta (Conversions API: the application and the appointment booking, with hashed email and phone, sent by HighLevel), upon activation of advertising.

Transfers outside the European Union (Anthropic, HighLevel, Google and the Apple, Google and Mozilla push services, then, upon their activation, Stripe, Resend, Meta and, for prospecting, Instantly) are covered by the European Commission's standard contractual clauses or an adequacy decision. Vercel, Supabase, Cloudflare and AssemblyAI are American companies: the servers Batiami uses with them are in Europe, and the same safeguards cover any access from the United States.

Google user data

Connecting Google is optional. A company manager can connect the company's Google Drive from My account in the Batiami application, so that Batiami can import files from Drive into a job and save each quote in Drive automatically.

Data we access

  • https://www.googleapis.com/auth/drive.file: only the files you select with the Google Picker, and the files and folders that Batiami itself creates (a "Batiami" folder with one sub-folder per job). Batiami cannot list, read or change any other file in your Drive.
  • openid and email: the email address of the connected Google account, shown in My account so you know which account is connected.

How we use it

  • Files you select in the Google Picker are copied into the job you are working on, then used to prepare that job's quote, exactly like a file you upload from your computer or phone.
  • Each quote Batiami generates (.xlsx) is saved in the job's folder in your Drive.
  • The email address is only displayed in My account.

We use Google user data only to provide these features to you. We do not use it for advertising, we do not sell it, and we do not use it to build profiles.

AI processing

To prepare a quote, the content of the files you select (for example a plan or a photo) is processed by our AI provider, Anthropic, under a contract that forbids using it to train its models. Batiami does not use Google user data, including files obtained through Google Workspace APIs, to develop, improve or train generalized or non-personalized AI or machine-learning models.

Sharing

Google user data are shared only with the service providers that run Batiami for you (hosting, file storage and AI processing, listed above), only to provide the features described here, and never with anyone else, except where required by law. People at Batiami do not read these data, except with your explicit permission, for security reasons (such as investigating abuse), or where required by law.

Storage and protection

  • The long-lived Google token that lets Batiami save your quotes is stored encrypted (AES-256-GCM) in our database in the European Union (Frankfurt, Germany). It is never shown to users or sent to the browser.
  • When you pick files, Google gives your browser a short-lived access token (about one hour), used only to open the picker and copy the files you selected. Batiami does not store it.
  • Files imported from Drive are stored with the job's files, encrypted in transit and at rest, in the European Union.

Retention and deletion

  • When you disconnect Google Drive from My account, the token is revoked with Google and deleted from our database immediately. You can also revoke Batiami's access at any time at myaccount.google.com/permissions.
  • Files imported into a job are kept with that job and deleted when the job is deleted, or at the latest when your data are deleted.
  • Quotes saved in your Drive belong to you: Batiami does not delete them.
  • To have all your data deleted, write to contact@batiami.com.

Limited Use

Batiami's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How long we keep data

  • Company, job and quote data: while your contract is active. A job deleted in the application is deleted with its files.
  • If you stop the monthly service, your account is paused: your data are kept for 12 months, and you pick up where you left off. One month before those 12 months end, we write to you to offer to resume, export your data (quotes, price library) or delete them. Without an answer, all your data are deleted, including at our providers. Only invoices are kept for 10 years, as the law requires.
  • At any time, you can ask for an export of your data or their immediate deletion.
  • Applications not followed by a contract: 3 years from the last contact.
  • At our AI provider: the conversation about a job is kept while the job exists, then deleted with it (at the latest when your data are deleted); working copies of files are deleted within 7 days.
  • Prospecting: at most 3 years after collection or after your last reply. After a "STOP", only your address is kept, in our opt-out list.

Prospecting

Batiami introduces its service by email to managers of construction companies.

  • Data: the manager's first name, last name and position, the company name, business email address and phone number.
  • Sources: the public register of companies, the company's website and its Google listing. An email address in your name is found by our provider Dropcontact, from your name and your company's website.
  • Purpose and basis: to introduce Batiami to you, on the basis of our legitimate interest in making our service known to construction companies.
  • Recipients: only our email sending and email search providers have access to these data: Instantly (United States) and Dropcontact (France). They are neither sold nor transferred.
  • Retention: at most 3 years after collection or after your last reply, then deletion.
  • Objection: reply "STOP" to any of our messages and you will receive nothing more. We then keep only your address, in our opt-out list, so that we never write to you again.

You can also exercise the rights described below by writing to contact@batiami.com.

Cookies

Batiami uses only the cookies needed to run the service: the session cookie (you stay signed in) and the language cookie. No advertising or tracking cookie is set without your consent.

On batiami.com, if you accept it, the Meta pixel (Meta Platforms Ireland) measures how well our Facebook and Instagram ads work (page views). It is never loaded without your consent, nor in the application. You can change your mind at any time with the “Cookies” link at the bottom of the site pages.

The parameters of the address you arrive from (ad campaign, referral code) are attached to your application so we know where it came from.

Security

Data are encrypted in transit. Each company's data are isolated. Passwords are hashed; access tokens (Google Drive) are encrypted.

Your rights

You can access, correct, delete, restrict or port your data, object to their processing and withdraw your consent at any time, by writing to contact@batiami.com. You can also lodge a complaint with the CNIL (www.cnil.fr).

See also our terms of use and legal notice.